User Authenticated Enrollment of Company Owned iOS Devices

Enrolling Apple devices by using the QR Code helps to simplify the process of onboarding the device. This enrollment avoids manual error with time-saving steps and efficient provisioning of iOS devices. The document below describes steps to enroll iOS devices with user authentication.

Before you Start

1. Make sure you completed the APNs upload part as per Setting Up APNs guide.
2. Make sure you have at least one Device Profile as per Create an Apple Device Profile guide.
3. Make sure you have at least one QR Code configuration as per Create a QR Code Configuration guide with User Authenticated Enrollment selected as Enrollment Method.
4. Make sure you have one iOS Device - Preferably a Supervised device having OS 13 or above.

Steps on iOS Devices

1. Start by logging into the Dashboard and navigate to Enrollment Configurations > QR Code Configurations
2. Expand the Configuration that you want to use (the one that has User Authenticated Enrollment chosen), and click on the iOS tab. There are two methods by which you can proceed for enrollment:
   1. QR code
      1. Click on Show iOS QR so that you can see the QR Code
      2. On the iOS Device, launch the Camera app.
      3. Scan the QR Code using the Camera app.
   2. Enrollment URL and code
      1. Under the iOS tab, you will find the Enrollment URL and Enrollment Code on the right-side.
      2. On the iOS Device, open Safari type in the Enrollment URL, and press Enter Key
      3. Enter the Code shown in the Enrollment Code section (under QR code configuration on Scalefusion Dashboard) and click on Enroll.
3. Enter the email ID (entered at the time of adding the user) of the user and click Confirm.
4. You will receive OTP on the registered email ID. Enter the OTP on the device and click Confirm. 
5. On the Terms of Service, click on Accept.
6. Next, click on Enroll
7. You would see a Notification asking you to open Safari. Please click on the notification.
8. Once Safari opens up, it will show you a dialog informing you that the Settings app will be opened. Click on Allow. 
9. At this point, the MDM Profile will be downloaded, and you will see an alert asking you to navigate to Settings to complete setup. Click on Close.
10. Press the Home key on the device and launch the Settings app.
11. In the Settings app, find and click on the Profile Downloaded option. This is normally located below the Apple ID menu item in Settings.
12. On the next screen, click on Install on the top right.
13. This will start enrolling the device, and if the initial checks pass, then you will be shown a warning page informing you that Scalefusion will be remotely managing the device. Click on Install again.
14. A dialog will be shown to confirm if you Trust this server. Click on Trust.
15. This will start signing into the Scalefusion, and once completed, you will see a screen with the Done option.
16. Clicking on Done will complete the flow, and you should see the set of policies and applications that you had allowed in the Device Profile have been applied to the device.