BYOD Android devices - QR code enrollment

This page explains provisioning BYOD Android devices using a QR code. Mobile users can enroll their personally-owned Android devices to BigFix Mobile with a QR code.

About this task

While enrolling, a work profile gets automatically deployed as per the associated policy group. After enrolling, the device will have a personal profile and a work profile. The organization can manage the work profile of the enrolled device through WebUI by applying policies through a policy group and through MDM actions. The organization does not have any visibility or control over the personal profile.

To enroll personally-owned or BYOD Android devices to BigFix Mobile and apply work profile using QR code, follow these steps:

Procedure

  1. Login to the BigFix enrolment URL from another device (other than the Android device that you want to enroll) to generate QR code.
    Note: You can generate QR code from a Windows, Apple, or Android device.


    1. Open the enrollment page where you can see the option to select QR enrollment.
    2. Enter Email address and password associated with Active Directory.
    3. Select Enroll using QR code.
    4. Click Enroll.
    After successful authentication, you are redirected to the page where QR code is displayed. This QR code is used for enrollment.
    Note: This QR code expires after 15 minutes. If the QR code expires, you cannot enroll your device with that QR code; therefore, you need to regenerate another one.
  2. Scan the QR code on the Android device that you want to enroll to complete the enrollment.
    1. From your Android device navigate to Settings > Google > Setup and restore > Setup Work profile.
    2. Scan the QR code from the device where the QR code is generated or enter the QR code.
    3. Click Enroll. The enrollment process begins.
    4. In the following screen, click NEXT

      .
    5. Wait for few seconds until the NEXT button appears on the screen and then click NEXT to continue. Wait for few minutes until the profile gets registered and enrollment is completed.
    6. In the next screen, to start setting up your work profile, click Accept & Continue. Based on the deployed policy group associated with the work profile, work applications and data are deployed to the device.

Results

You have successfully enrolled your Android device to the BigFix Mobile and applied work profile. It might take a few minutes for the enrolled device to show up in the WebUI. Once the device is listed under device list in WebUI, you can manage the device from here.

What to do next

After successfully enrolling the BYOD device to BigFix Mobile, navigate to Personal > Google Accounts, you can see two profiles namely Personal and Work.

Also, you can see two tabs, one for personal and one for work. Under Work profile, you can see only the applications as per the applied policy.

  • In the notification bar, you can see “Installing apps from your organization” if Appstore apps were part of the policy group that got deployed to the MDM server for BOYD devices.
  • In the Work profile, if you go to Google Play store, you can see only the apps that are allowed as per the policy.