You can provide the enrollment URL to users in the way that best fits your environment.
Users can log in to the enrollment portal using an LDAP directory account or a Jamf Pro user account. When a user logs in with an LDAP directory account, user and location information is submitted to Jamf Pro during enrollment. When a user logs in with a Jamf Pro user account, it allows an LDAP user to be assigned to the device.
For account-driven enrollment, the user is redirected to the enrollment portal and prompted to install the MDM profile on their device after they authenticate to their device with a Managed Apple Account. Because this enrollment method is initiated when the user signs in with the Managed Apple Account, you do not have to provide users with the enrollment URL to direct them to the enrollment portal.
Device Enrollment enabled for mobile devices via Jamf Pro's user-initiated enrollment settings
For more information, see Enabling Device Enrollment for Mobile Devices in Jamf Pro.
(LDAP sign-in only) An LDAP server set up in Jamf Pro
For more information, see LDAP Directory Service Integration.
Safari on user devices to access the enrollment URL.
/enroll. To direct users to the enrollment portal, you provide an enrollment URL. - Jamf Cloud-hosted —
https://JAMF_PRO_URL.jamfcloud.com/enroll
- On-premise —https://JAMF_PRO_URL.com:8443/enroll
When a user logs in with an LDAP directory account, user and location information is submitted to Jamf Pro during enrollment.
When a user logs in with a Jamf Pro user account, an LDAP user can be assigned to the device.