Enroll Windows Devices for OneIdP users

The document outlines the enrollment process for OneIdP users to enroll Company Owned Windows devices in Scalefusion.

Pre-requisites

1. QR code configuration should be created on Scalefusion Dashboard having Enrollment Type as User Authenticated Enrollment
2. Users with oneidp domain (default) should be added on Scalefusion Dashboard. 

Enrolling Devices for OneIdP Users

1. In QR code configurations, expand the configuration from the list and click on Windows. This shows the Enrollment URL and Enrollment Code.
    
2. On your Windows device, open IE11/Edge and type in the Enrollment URL shown and press Enter.
   
3. A new window Kiosk Device Enrollment windows will open. Enter the Code you have received (from the Enrollment Configuration created), in the Enrollment Code section and click Enroll.
   
4. Next, enter the oneidp email of the user, which you created on Scalefusion Dashboard. Click Confirm.
   
5. On the next screen click Authenticate.
   
6. You will be directed to OneIdP login screen. Enter your password (the password you entered while adding user) and click on sign in.
   
7. The Terms of Service page will be displayed. Review the terms of service and click Accept.
   
8. Follow the next steps to set up a work or school account
9. The device will be enrolled in Scalefusion with OneIdP user authenticated.

Other Important Points to Note

1. For users belonging to custom domains, users will need to authenticate by entering OTP which comes on their email address.
2. If the setting Enforce Users to sign in using GSuite/O365/custom domain is enabled in User Management, users will need to authenticate by entering their respective domain credentials.
   
3. However, in the above cases if they migrate to OneIdP, they will get the OneIdP login page and can authenticate with OneIdp username and password.
4. BYO Enrollment is not supported for OneIdP (default domain) users. It is possible for users belonging to custom domain.