Enroll Institutionally Owned Mobile Devices with Zero-Touch Deployment

Jamf Trusted Access Solution Guide for Business

Solution
Application
Content Type
Technical Documentation
Solution Guide
Utilities & Services
ft:locale
en-US

Apple's Automated Device Enrollment, also known as zero-touch deployment, ensures Trusted Access by immediately enrolling and configuring a mobile device when a user turns it on, without requiring any interaction with IT. This method is ideal for institutionally owned devices and uniquely prevents end users from removing the MDM profile, maintaining device compliance and security.

Note:

Apple's Automated Device Enrollment is the Jamf-recommended enrollment method to achieve optimal Trusted Access outcomes. Users can manually enroll institutionally owned devices that are not eligible for Automated Device Enrollment with Device Enrollment. For more information, see Device Enrollment for Mobile Devices in the Jamf Pro Documentation.

Jamf Pro's Global Management settings allow you integrate with Automated Device Enrollment, which establishes communication between Jamf Pro and Apple Business. For more information, see Automated Device Enrollment Integration in the Jamf Pro Documentation.

When the integration is complete, you can then use a Jamf Pro PreStage enrollment to configure and deploy the Automated Device Enrollment experience to mobile devices. Available Automated Device Enrollment settings include the following:

  • Supervising and requiring MDM profile installation on devices

  • Adding enrollment customization configurations

  • Skipping Setup Assistant screens