--- title: "How to Enroll Windows Devices for OneIdP Users in Scalefusion" slug: "enroll-devices-for-oneidp-user" description: "Step-by-step guide on enrolling Windows devices for OneIdP users with Scalefusion MDM. Learn how to securely authenticate and manage devices for streamlined user management." updated: 2024-08-08T14:36:27Z published: 2024-08-08T14:36:27Z canonical: "help.scalefusion.com/enroll-devices-for-oneidp-user" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt > Use this file to discover all available pages before exploring further. # Enroll Windows Devices for OneIdP users The document outlines the enrollment process for OneIdP users to enroll Company Owned Windows devices in Scalefusion. ## Pre-requisites 1. QR code configuration should be created on Scalefusion Dashboard having Enrollment Type as [User Authenticated Enrollment](/docs/user-authenticated-enrollment-of-company-owned-windows-devices) 2. Users with [oneidp domain (default)](/docs/setup-oneidp-2) should be added on Scalefusion Dashboard. ## Enrolling Devices for OneIdP Users 1. In QR code configurations, expand the configuration from the list and click on Windows. This shows the **Enrollment URL** and **Enrollment Code**.  ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723127041338.png) 2. On your Windows device, open IE11/Edge and type in the **Enrollment URL** shown and press Enter. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1701178646555.png) 3. A new window Kiosk Device Enrollment windows will open. Enter the Code you have received (from the Enrollment Configuration created), in the **Enrollment Code** section and click **Enroll**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1701178768053.png) 4. Next, enter the oneidp email of the user, which you created on Scalefusion Dashboard. Click **Confirm.** ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723127141661.png) 5. On the next screen click **Authenticate.** **![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723127370197.png)** 6. You will be directed to **OneIdP login** screen. Enter your password (the password you entered while adding user) and click on **sign in**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723127496752.png) 7. The Terms of Service page will be displayed. Review the terms of service and click **Accept**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723127566544.png) 8. Follow the next steps to set up a work or school account 9. The device will be enrolled in Scalefusion with OneIdP user authenticated. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723127715065.png) ## Other Important Points to Note 1. For users belonging to custom domains, users will need to authenticate by entering OTP which comes on their email address. 2. If the setting **Enforce Users to sign in using GSuite/O365/custom domain** is enabled in User Management, users will need to authenticate by entering their respective domain credentials. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1701868980015.png) 3. However, in the above cases if they migrate to OneIdP, they will get the OneIdP login page and can authenticate with OneIdp username and password. 4. BYO Enrollment is not supported for OneIdP (default domain) users. It is possible for users belonging to custom domain.