Enroll iOS Devices for OneIdP users

The document outlines the enrollment process for OneIdP users to enroll Company Owned iOS devices in Scalefusion.

Pre-requisites

1. QR code configuration should be created on Scalefusion Dashboard having Enrollment Type as User Authenticated Enrollment.
2. Users with OneIdP domain (default) should be added on Scalefusion Dashboard. 

Enrolling Devices for OneIdP Users

1. In QR code configurations, expand the configuration from the list and click on iOS. This shows the Enrollment URL and Enrollment Code.
2. There are two methods by which you can proceed for enrollment:
   1. QR code
      1. Click on Show iOS QR so that you can see the QR Code
         
      2. On the iOS Device, launch the Camera app.
      3. Scan the QR Code using the Camera app.
   2. Enrollment URL and code
      1. Under the iOS tab, you will find the Enrollment URL and Enrollment Code on the right-side.
         
      2. On the iOS Device, open Safari, type in the Enrollment URL, and press Enter Key
         
      3. Enter the Code shown in the Enrollment Code section (under QR code configuration on Scalefusion Dashboard) and click on Enroll.
         
         
3. Next, enter the oneidp email of the user, which you created on Scalefusion Dashboard. Click Confirm.
   
   
   
4. On the next screen click Authenticate.
   
   
   
5. You will be directed to OneIdP login screen. Enter your password (the password you entered while adding user) and click on sign in.
   
6. The Terms of Service page will be displayed. Review the terms of service and click Accept.
   
7. Follow the next steps to install the MDM Profile. On the next screen, click on Enroll.
   
   1. This will open the following dialog. Click on Allow to proceed with enrollment.
      
   2. The profile will be downloaded and shown under Device Management on the device.
      
   3. Proceed with installation of profile by clicking on Install
      
8. The device will be enrolled in Scalefusion with OneIdP user authenticated.

Other Important Points to Note

1. For users belonging to custom domains, users will need to authenticate by entering OTP which they receive on their email address.  
2. If the setting Enforce Users to sign in using GSuite/O365/custom domain is enabled in User Management, users will need to authenticate by entering their respective domain credentials.
   
3. However, in the above cases if they migrate to OneIdP, they will get the OneIdP login page and can authenticate with OneIdp username and password.
4. BYO Enrollment is not supported for OneIdP (default domain) users. It is possible for users belonging to custom domain.