Welcome
Installation and Configuration
Read this guide to learn about the requirements and available installation scenarios to ensure that the deployment of BigFix MCM and BigFix Mobile goes smoothly in your environment.
Domain join installation and configuration
Read this section to learn the prerequisites and the tasks to install ODJ service to set up your environment to enroll Windows devices and join Active Directory domain or both Active Directory and Azure AD domain.
Install and configure ODJ Service - BigFix WebUI
ODJ service is an "Add-on" service and is installed through WebUI after completing the initial MDM server install. Log in to WebUI to install and configure ODJ Service.

BigFix Documentation Homepage
Modern Client Management and BigFix Mobile
Welcome to the Modern Client Management and BigFix Mobile documentation, where you can find information about how to install, maintain, and use Modern Client Management and BigFix Mobile.
Overview
This section guides you through BigFix Modern Client Management (MCM) and BigFix Mobile to understand the MCM concepts, terminologies, features, and functionality.
Guides in PDF format
This section contains links to PDF versions of all the MCM and BigFix Mobile manuals.
Installation and Configuration
Read this guide to learn about the requirements and available installation scenarios to ensure that the deployment of BigFix MCM and BigFix Mobile goes smoothly in your environment.
- MCM and BigFix Mobile server and components installation
- Identity service configuration
  Starting from UEM3.0, MCM extends the capability to identify and manage devices based on users. The users can be identified based on their associated attributes including names, roles, group memberships, distribution list memberships, or physical locations. The devices identified based on users can then be targeted and managed through various configurations to provide conditional access and ensure compliance, endpoint security, and App protection.
- Simple Certificate Enrollment Protocol (SCEP) configuration
  BigFix MCM supports certificate management and certificate-based authentication through Simple Certificate Enrollment Protocol (SCEP). SCEP is the fastest and most secure way to provision certificates to all your MCM-managed devices. With SCEP, IT Admins can automate issuing certificates to the endpoints to provide access to corporate Wi-Fi, VPN, and secure e-mail through encryption.
- Domain join installation and configuration
  Read this section to learn the prerequisites and the tasks to install ODJ service to set up your environment to enroll Windows devices and join Active Directory domain or both Active Directory and Azure AD domain.
  - Prerequisites for hybrid domain join
    Read this page to learn the prerequisites to set up ODJ service to support the Azure AD joined Windows devices to join on-premises AD on enrollment.
  - Prerequisites for AD domain join
    Read this page to learn the prerequisites to set up ODJ service to support Windows devices to join on-premises AD on enrollment.
  - ODJ and MDM SSL certificates and keys
    SSL certificates and keys are required to authenticate the MDM Server to the Windows ODJ Server. These certificates and keys must be generated through the BESAdmin command. The generated SSL certificates/keys are stored in the directory that you specify in the BESAdmin command.
  - Install and configure ODJ Service - BigFix WebUI
    ODJ service is an "Add-on" service and is installed through WebUI after completing the initial MDM server install. Log in to WebUI to install and configure ODJ Service.
  - Troubleshoot ODJ
    https://learn.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-hybrid-join-windows-current
- SAML-authentication configuration
  MCM and BigFix Mobile supports Security Assertion Markup Language (SAML) authentication to enroll devices to protect sensitive data and ensure secure access to corporate resources.
Quick Start
This quick start guide gets you up and running with your BigFix MCM and BigFix Mobile solution. It helps you secure, configure, and manage your mobile devices quickly and efficiently.
User Guide
Administrator Guide
Read this guide to learn about enrolling, administering, and troubleshooting endpoints through BigFix MCM and BigFix Mobile.
Glossary
This glossary provides terms and definitions for the Modern Client Management for BigFix software and products.

Install and configure ODJ Service - BigFix WebUI

ODJ service is an "Add-on" service and is installed through WebUI after completing the initial MDM server install. Log in to WebUI to install and configure ODJ Service.

Before you begin

If you want to configure ODJ Service for hybrid domain join, ensure the required prerequisites are met.
If you want to configure ODJ Service for AD domain join, ensure the required prerequisites are met.
Ensure the required server and client certificates are available.
ODJ Connector needs reachability/line of site to the MCM server
OU details
Domain admin (or equivalent) permission for the ODJ connector to generate the Djoin blob

About this task

Complete the following tasks to install and configure ODJ service.

Install ODJ service
Configure MDM Server for ODJ Service
Configure ODJ Policy from Windows Offline Domain Join Template and deploy to MDM server

What to do next

Once the ODJ policy is created and added to a policy group, the ODJ installation and configuration is complete. You can then enroll Windows 10 and Windows 11 devices using Autopilot enrollment with Offline Domain Join service.