Automated Device Enrollment for Computers

Jamf Pro Documentation 11.27.0

Solution
Application
Content Type
Technical Documentation
Utilities & Services
version
11.27.0
ft:locale
en-US
vrm_version
11.27.0

Apple's Automated Device Enrollment, also known as zero-touch deployment, immediately enrolls and configures a device when a user turns it on. No user interaction with IT is required. This enrollment method is most commonly used for devices owned by your organization and is the only method that can prevent end users from removing the MDM profile.

Jamf Pro's Global Management settings allow you integrate with Automated Device Enrollment, which establishes communication between Jamf Pro and Apple Business Manager or Apple School Manager. For more information, see Automated Device Enrollment Integration.

When the integration is complete, you can then use a Jamf Pro PreStage enrollment to configure and deploy the Automated Device Enrollment experience to computers. Available settings include the following:

  • Supervising and requiring MDM profile installation on devices

  • Adding Enrollment Customization configurations

  • Requiring single sign-on (SSO) to begin enrollment and integrating with Jamf Connect to create a user's local account based on user information from your identity provider (IdP)

    For more information about this workflow, see the Customizing the Jamf Pro Enrollment Experience Using Enrollment Customization and Jamf Connect technical paper.

  • Skipping Setup Assistant screens