Enrolling Corporate-Owned Android Devices
  • 28 Sep 2023
  • 9 Minutes to read
  • PDF

Enrolling Corporate-Owned Android Devices

  • PDF

Article Summary

The first step to managing your corporate-owned Android device is to enroll it in the Scalefusion dashboard. Scalefusion offers quite a few mechanisms to enroll your corporate-owned devices. Here is a list of options, the prerequisites and the description of when to use them,

Enrollment MethodPre-RequisitesDescription
Sign InOwner/Admin sign-in credentials.Use this method when you or the IT admin are setting up the devices
QR Code
  • Create a QR Code using the Device Enrollment > QR Code option on the Dashboard.
  • A Camera enabled Phone/Tablet.
Use this for faster enrollment of devices and/or when you don’t want to share the credentials.
Auto-Login
  • IMEI of the device is pre-enrolled using the Device Enrollment > IMEI enrollment option on the Dashboard.
  • Configuration file downloaded after creating a QR Code configuration.

Use this option for bulk enrollment of devices,

  • When you have the list of IMEI numbers.
  • When you are using a custom ROM preload the Scalefusion apk and configuration file.
License KeyNeed a License key.Use this option if you want to enroll via the license key.
afw#mobilockGoogle-compliant Android 6.0 and above device.The Android for work (afw#) method is used to give Scalefusion extra privileges to better manage corporate devices. Once the Scalefusion app is downloaded, you will need one of the options listed 1-4 above.
Zero-Touch
  • Zero Touch Portal Account
  • Zero Touch Device
  • Scalefusion Account
Zero-touch enrollment is a streamlined process for Android (non-Samsung)  devices to be provisioned for enterprise management. On first boot, devices check to see if they’ve been assigned an enterprise configuration. If so, the device initiates the fully managed device provisioning method downloads Scalefusion and completes enrolling the managed device.
Samsung Knox Mobile Enrollment
  • Samsung KME Account
  • Samsung KME Supported devices with Knox 3.8 & above
  • Scalefusion Account
  • Samsung KME is a streamlined process for Samsung devices to be provisioned for enterprise management.
  • Devices already purchased can be enrolled using the Knox Deployment App.
  • Devices purchased from a Reseller will be provisioned on the first boot.
Six-tap setup
  • Device is factory-reset
  • Entering a GMail account during device setup need not be done.
  • Create a QR Code configuration
  • The device must be running Android 6.0 and higher
Six-tap setup offers a quick and easy way to enroll devices right when they are unboxed or after a factory reset, in the form of six-taps and scanning a QR Code. This method of enrollment downloads the Scalefusion application, sets the app as Device Owner (EMM managed) and performs the Sign-In automatically, leaving only the permissions step to be completed.

In this guide, we will see how to enroll an Android device using the following methods:

Enroll using Sign-in Credentials

Before you Begin

  1. Valid Sign-in credentials that are used to sign in to Dashboard.
  2. An Android device running 5.0 and higher.

Visual Guide

Please watch the video below for a quick visual walkthrough.

Steps

  1. Install the Scalefusion client from Google Play Store or install the Scalefusion apk directly.
  2. Launch Scalefusion client.
  3. Click on Enroll.
  4. From the options menu, select Sign In.
  5. Enter your Email ID and Password in the respective text input fields.
  6. Click Sign In.
  7. You may see the Data Collection Information screen. Click Agree
  8. You will be asked to give Scalefusion permission to make and manage Phone calls. Click on Allow.
  9. If the credentials are correct, then the device will sign in and show you the Device Name screen. Enter a name for your device and click Submit.
  10. If you have created a Device Group or Device Profile on the Scalefusion dashboard, then you can enter the group key or select the profile.
    If you don't want this device to be a part of any group or profile, you can select Skip.
  11. You will be shown the Permissions screen. The permissions are divided into 3 sections,
    1. Mandatory Permissions: Clicking on the toggle button next to each of the permissions will take you to a system screen, where among other applications, you would see Scalefusion. Enable Scalefusion for each permission and hit the back key to come back to the permission screen. Click Next once you have given all permissions and see green ticks next to each one.
    2. Runtime Permissions: These are the run-time permissions and are required for an optimal Kiosk/Agent experience.
    3. Set Scalefusion as Launcher: This option is shown if Scalefusion is set to run as Kiosk, which is the default (and only) option as of today. Click on the Setup Scalefusion button, and from the list of options, select Scalefusion as the launcher and select Always.
      If you have a GSuite ID, on the permissions page, there will be a toggle button to Sign In To GSuite with your GSuite account ID. You need to enable this and follow further steps. Once completed, click the Complete Setup button. Please see details in the below section, Enrollment with GSuite. In this case, the device should be made as Device Owner
  12. That should be it. If all steps are completed properly, then you should see the Scalefusion home screen with all the applications that you have allowed from the Scalefusion Dashboard. 

Enroll using the QR Code

Before you Begin

  1. A QR Code was created using the Device Enrollment > QR Code option in the Scalefusion dashboard as described here.
  2. An Android device running 4.0 and higher with the camera.

Visual Guide

Please watch the video below for a quick visual walkthrough.

Steps

  1. Install the Scalefusion client from Google Play Store or install the Scalefusion apk directly.
  2. Launch Scalefusion client.
  3. Click on Enroll
  4. From the options menu, select QR Code.
  5. Scan the QR Code by placing it between the markers shown on the screen. If the QR Code is valid & scanned properly, then the device will sign in.
  6. Once the device signs in successfully, you will see the Permissions screen. The permissions are divided into 3 sections,
    Note:
    If you have a GSuite ID, on the permissions page, there will be a toggle button to Sign In To GSuite with your GSuite account id. You need to enable this and follow further steps. Once completed, click the Complete Setup button. Please see details in the below section, Enrollment with GSuite.
    1. Mandatory Permissions: Clicking on the toggle button next to each of the permissions will take you to a system screen, where among other applications, you would see Scalefusion. Enable Scalefusion for each permission and hit the back key to come back to the permission screen. Click Next once you have given all permissions and see green ticks next to each one.
    2. Runtime Permissions: These are the run-time permissions and are required for an optimal Kiosk/Agent experience.
    3. Set Scalefusion as Launcher: This option is shown if Scalefusion is set to run as Kiosk, which is the default (and only) option as of today. Click on the Setup Scalefusion button, and from the list of options, select Scalefusion as the launcher and select Always.
  7. That should be it. If all steps are completed properly, then you should see the Scalefusion home screen with all the applications that you have allowed from the Scalefusion Dashboard.

Enroll using afw#mobilock

Before you Begin

  1. Enroll for Android for Work on the Scalefusion dashboard as described here.
  2. A QR Code was created using the Device Enrollment > QR Code option in the Scalefusion dashboard as described here.
  3. A completely new or factory reset Android Enterprise recommended device. For a full list of devices, please check here.

Steps

  1. Switch on the device and select Language and Country.
  2. Power On the device.
  3. Select your language and configure a WiFi. A WiFi connection is needed to download the Scalefusion client.
  4. When you see the screen asking you to configure your Gmail account, enter afw#mobilock
  5. Wait for the Scalefusion client to be downloaded.
  6. Click Install when prompted.
  7. Once done, you should see the Scalefusion landing screen, which shows a camera view. In this screen,
    1. You can scan a QR Code if you have created a QR Code Configuration. You can scan a QR Code that you have created on the Scalefusion Dashboard. To create a QR Code configuration, refer to this document.
    2. If you would like to set up the device using a License Code or Sign-In credentials, then click on the 3 dots menu option and navigate to the start page.
  8. On the Permissions Page, Set Scalefusion as Device Owner.
    If you have a GSuite ID, on the permissions page, there will be a toggle button to Sign In To GSuite with your GSuite account ID. You need to enable this and follow further steps. Once completed, click the Complete Setup button. Please see details in the below section, Enrollment with GSuite
  9. Complete the Setup by choosing to Create an AfW account.
  10. Scalefusion performs a silent setup in the background to manage the device, which usually takes 10-15 minutes. You can check the state of the setup by clicking on the 3 dots menu and selecting Diagnostics, and the AfW Setup card will display the status.

Enroll using Auto-Login

Please refer to our detailed help document on IMEI/Serial Number based Enrollment to prepare your devices for bulk enrollment with IMEI/Serial number.

Enroll using the License Key

Please refer to our detailed help document on Enroll using the License key

Enroll using ZeroTouch

Please refer to our detailed help document on Zero Touch Setup to prepare your devices for zero-touch enrollment.

Enroll using Samsung Knox Mobile Enrollment

Please refer to our detailed help document on Samsung Knox Mobile Enrollment to prepare and enroll your Samsung devices.

Enroll using a Six-tap setup

Please refer to our detailed help document on Six-taps setup to prepare your Android-owned corporate devices for enrollment using the six-taps setup method.

Enrollment with GSuite

Six times tap and afw#mobilock enrollment methods also allow you to enroll with GSuite ID. To enroll with GSuite, make sure the Android Enterprise Setup is done with GSuite.

While enrolling, on the permissions page, there would be a toggle button to Sign In Into GSuite. You need to enable this and follow further steps. After toggling on Sign In Into GSuite, follow these steps to complete enrollment:

  1. Enter your GSuite account ID and tap Next
  2. Enter password. Tap Next
  3. This will bring up the Google Services page. Tap Accept
  4. Choose an account to continue to Scalefusion. Here, select your GSuite account ID.
  5. Once verified, you will get a green check mark next to Sign In into GSuite.
  6. Hit Complete Setup

Frequently Asked Questions

Question: Why does Scalefusion ask for permissions?

Answer: The Scalefusion Android client requires these permissions to give you fine-grain control on your corporate-owned devices. If you would like to know why a certain permission is used, please contact our support at support@scalefusion.com, and we would be happy to elaborate.

Question: Nothing happens when I click on the toggle next to the permission name. What should I do?

Answer: On some devices, the permission might not be exposed to third-party applications, although it is an Android OS standard. A Skip button would appear wherever the Scalefusion application can detect that the permission is not accessible. Click on Skip to complete the setup.

Question: When I try to enable Usage stats permission, I see an error dialog asking to contact support. What should I do?

Answer: This happens when third-party applications are not able to access this permission. You can choose to select Skip on this dialog and then select Accessibility permission. In case you are using Accessibility permission, make sure to test the basic functionality of Scalefusion before giving the device to your employees.

Question: On Samsung devices and on devices where I have used the afw#mobilock flow, I don't see the Runtime permissions screen. Is this expected?

Answer: This is expected. On these devices, the Scalefusion app can simplify the enrollment process due to enhanced privileges and hence it attempts to auto-grant the permissions to itself.

Question: Although I am setting up the device for the first time, I see that some permissions are already enabled and have a green tick.

Answer: This happens because the Scalefusion app is not able to determine the state of that permission properly. To confirm that Scalefusion has indeed the permission, please navigate to System Settings and verify that Scalefusion indeed has the permission by searching for the relevant permission, which has the green tick.

Question: I am trying to enroll a device running Android 4.4, and I don't see all the permissions as shown in the video. Is this expected?

Answer: Yes. On Android version less than 6.0, most of the runtime permissions are auto-granted by the Android OS, and hence these are not required to be given explicitly.


Was this article helpful?