Enrolling iOS devices with Managed Apple IDs

This guide helps you to enroll your personal iOS device to Scalefusion as BYOD to access work related applications.

Prerequisites

1. You should have a managed Apple ID
2. The managed apple ID should be imported on the Scalefusion Dashboard under User Enrollment
3. Supported OS: iOS/iPadOS 13+ devices 
4. Apple User Enrollment Profile is created
5. Enrollment Configuration for Apple User enrollment is created

Users can enroll their device using any of the following methods:

1. Invite Users
2. Scan QR code  
3. Enrollment URL and code

Method 1: Enroll by Inviting Users

Invite users to enroll their devices by:

• Clicking the Email icon from actions bar, or
  
• Click on Invite Users button, configure the email and select users whom you want to send the invite.
  

Prerequisites

1. Make sure you have access to the corporate email.
2. Make sure that your IT Admin has invited you to enroll in Scalefusion.

Steps to enroll

1. To start the enrollment process, depending on where you are checking your configuration email, use the appropriate option below,
   1. If you are viewing e-mail on your iOS device to be enrolled, you can click on Enroll your Device.
   2. If you are viewing email on your laptop/desktop, then on your iOS Device, launch the Camera app and scan the QR Code.
2. Either of the steps above will launch Safari with your managed Apple ID automatically populated. Click Confirm
   
3. On the next screen, click Enroll
   
4. When you see a dialog to download the configuration profile, click ALLOW
   
5. The profile will be downloaded and show a confirmation screen
   
6. Open the Settings application and click on Enroll in Scalefusion option. 
7. Here, you will see the organization and apple id information displayed. Click on Enroll my iPhone
   
8. Click Continue
   
9. If you have a GSuite/O365 account federated, the next screen will ask you to enter your credentials. Enter your email id and click Next
   
10. Enter your GSuite/O365 account password and click Next
    
11. If 2FA is enabled, you will get the authentication screen else not.
12. This will complete the enrollment process, and your device is now managed. The applications and policies pushed by your IT Admin will start getting installed.
    

Method 2: Scan QR code

1. Launch Device Camera
2. Scan the QR Code that appears on clicking Show iOS QR in the Enrollment Configuration on Scalefusion Dashboard
   
3. Safari will be launched. Here, enter your managed Apple ID and click Confirm
   
4. On the next screen, click Enroll
   
5. Follow Next steps (similar to Step #4 to #12 as above) to complete enrollment

Method 3: Enrollment URL and Enrollment code

1. Open Safari and type in the Enrollment URL (in Enrollment Configuration on Scalefusion Dashboard) and press Enter Key
   
2. Enter the Code shown in the Enrollment Code section (in Enrollment Configuration) and click Enroll
   
3. Next, enter your managed Apple ID and click Confirm
   
4. On the next screen, click Enroll
   
5. Follow Next steps (similar to Step #4 to #12 in Method 1 above) to complete enrollment

Post Enrollment

Once iOS devices are enrolled as BYOD, notice there will be separate containers for work and personal data.

1. In Settings two profiles created, one is personal and second is the work profile with the name Scalefusion.
   
2. In Files, there will be two iCloud Drives. The one for work has Scalefusion written underneath.
   
3. Similarly, two system apps will be visible (one for work and one for personal use) on the device.

Known Behavior

1. Allowing Managed Apple ID on a device may not be completely secure as users can use this ID on any device and access the data from managed iCloud.