Enrolling Android Plus Devices with OEM Specific Device Agents

Before you begin

Important: As of SOTI MobiControl v14.4, all fresh installations of SOTI MobiControl have Android Enterprise selected as the default Android Plus Management style. To proceed with this procedure, you need to confirm that either OEM Specific for All Android Devices or OEM Specific for Android 6.0 and Below is selected instead. See Choosing an Android Plus Management Style for instructions.

About this task

In this procedure, you'll learn how to:

Procedure

Define enrollment settings for Android Plus devices
  1. In the SOTI MobiControl legacy console, go to the Android Plus > Rules and right-click Add Devices. Select Create Add Devices Rule to launch the Create Add Devices Rule wizard.
    An add devices rule defines enrollment settings for your devices. You can create multiple add devices rules, each with different enrollment settings. However, you cannot use one add devices rule across multiple platforms.
    Location of right-click menu to create a new Android Plus add devices rule.
  2. Enter a name for the add devices rule. Make it brief, but descriptive, especially if you plan to create multiple add devices rules. Click Next.
  3. Choose the destination device groups:
    Manual All devices enrolled with this rule will be placed in the same device group.

    On the next screen, select a device group from the list to enroll your devices into and then skip to the step for selecting a user authentication option.
    Based on User Group Membership Devices will be placed into groups based on the membership of the user account assigned to the device. You'll be able to associate user groups to specific device groups later on in the wizard.

    Click Next.

  4. Choose either LDAP Directory Service or Identity Provider and then select an identity management connection from the dropdown list. If you have not configured any connections yet, click Manage Directory Services / IdP Connections to configure a new connection in the dropdown list instead. See Identity Management for more information. Click Next.
  5. Enter a user group (for example, administrators) that exists in your connection in the field and click Add. Once it appears under User Groups, choose a device group from the dropdown list. All members of the user group will be automatically added to the selected device group as soon as they enroll in SOTI MobiControl. If you'd like, add any terms and conditions documents. Click Next.
    User group mapping in add devices rule
  6. Select a user authentication option.
    Note: These options appear only if you chose Manual for mapping your device destinations.
    Utilize user groups to authenticate users during device enrollment Use a directory service or an identity provider for user authentication.

    Select Directory Service to select a directory service connection from the list, and search for a user group using that connection. If no directory service connection has yet been configured, select Manage Directory Services to open the Directory Service Configuration which you can use to configure a new connection.

    Select Identity Provider to select an identity provider connection from the list, and search for a user group using that connection. If no identity provider connection has yet been configured, select Manage IdP Connections to open the Identity Provider Configuration which you can use to configure a new connection.
    Password required to verify device enrollment Specify a single password for enrollment across all devices that enroll using this add devices rule.
    No password required to verify device enrollment Allow devices to enroll without verification.
  7. Select a certificate authentication authority. Click Next.
  8. Optional: Enable the Terms and Conditions setting and select a terms and conditions document from the dropdown list. If you haven't uploaded a terms and conditions document yet, click Manage to add a new document. Click Next.
    Device users will be prompted to accept the terms and conditions upon enrollment.
  9. Click Next to skip the Android Enterprise Setup wizard screen.
    These options are only applicable for Android Enterprise enrollment.
  10. Choose the download source of the Android Plus device agents. Select Download from the Google Play Store to ensure your devices are always updated with the latest device agent. Select Download directly from server if you need to control app updates more strictly. Click Next.
    If your preferred Android Plus agents are not already available on the server, you'll need to download them to your SOTI MobiControl instance. Click Manage Agents and add the latest Android Plus device agents.
  11. Specify a naming convention for your devices. Use a combination of text and macros to automatically and intelligently name your devices.
    For example, Ottawa Sales %AUTONUM% %ENROLLEDUSER_EMAIL% transforms into Ottawa Sales 001 sarah@organization.com, Ottawa Sales 002 saurabh@organization.com, and so on.
  12. Review your enrollment settings. Click Back to return to a previous screen and make changes or click Advanced to adjust the rule further.
  13. Once you're satisfied with your enrollment settings, click Finish to save your new add devices rule.
  14. Make a note of the Enrollment ID or Enrollment URL.
    Location of Enrollment ID and URL in add devices rule summary
Enroll Android Plus Devices into SOTI MobiControl
  1. Use one of the following methods to install the Android Plus device agent on your devices:
  2. Launch the agent on the device and enter the enrollment ID or the enrollment URL of the add devices rule whose settings you want to apply to the device.
    You can find the enrollment ID and the enrollment URL in the Information pane of the Rules tab when the add devices rule is selected.
  3. Follow the instructions in the Device Agent Configuration applet.

Results

Your device is now enrolled in SOTI MobiControl and can communicate with the SOTI MobiControl deployment server.