Each device in your organization's deployment must be enrolled before it can communicate with Workspace ONE UEM and access internal content and features. Enroll devices using one of three methods: Basic, Directory, Authentication Proxy. Also, AirWatch Container supports Autodiscovery and Security Assertion Markup Language (SAML) integration to help simplify enrollment.


  1. Navigate to Devices > Device Settings > Devices & Users > General > Enrollment > Authentication.
  2. Select the Authentication Mode.
    • Basic
    • Directory
    • Authentication Proxy
  3. If desired, choose to use Autodiscovery to associate devices with an email domain.

    To learn more, see the Autodiscovery section in the VMware Workspace ONE UEM Mobile Device Management guide.

What to do next

Choose to set up SAML 2.0 integration to enable single sign on architecture or federal authentication. Begin by navigating to Groups & Settings > All Settings > System > Enterprise Integration > Directory Services.

Note: For information on SAML enrollment, see the VMware AirWatch SAML Integration guide.