Advanced Service Discovery Configuration for Multiple Enrollment Types

Technical Articles

Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

You can configure different enrollment types for different device families. For example, you may want Mac computers to enroll through account-driven Device Enrollment, while having iPhone, iPad, and Apple Vision Pro devices use account-driven User Enrollment for BYOD.

Warning:The following configuration could be disruptive to your current Automated Device Enrollment deployment workflows and scoping, depending on whether you are scoping to smart groups with "PreStage Enrollment: {PreStage_Name}" criteria. This may also disrupt Automated Device Enrollment device assignments if your organization maintains multiple MDM servers for different purposes.
  1. Configure Jamf Pro to connect to Apple Business or Apple School Manager using multiple MDM server tokens.
  2. Set one server object in the default server settings to be for model families, like iPhone/iPad, as needed.
  3. Set one server object in the default server settings to be for model family Mac.
  4. (Optional) Name the server token objects accordingly, including the model families in the name.
  5. Enable account-driven enrollments for the preferred model families and enrollment types in Jamf Pro's user-initiated enrollment settings.
  6. Get the ServerUUID values for each server.
  7. Use the Jamf Pro API to set the server object for iPhone, iPad, or Apple Vision Pro devices to mdm-byod.
  8. Use the Jamf Pro API to set the server object for Mac computers to mdm-adde.

When querying the Jamf Pro API, you should see two Automated Device Enrollment tokens and server UUIDs, with the respective enrollment types of either mdm-byod or mdm-adde defined for service discovery.