You can use a registration token to enroll a device which is a highly secure authentication method.
- Open the SMS or email message on the device and select the link that contains the enrollment token. If an enrollment page prompts for a Group ID or token, enter the token directly.
- Enter a user name or password if two-factor authentication is used.
- Continue with your enrollment as usual.
Once complete, the device is associated with the user for which the token was created.
What to do next
Once the MDM profile is installed on the device, the token is considered "used" and cannot be used to enroll other devices. If the enrollment was not completed, the token can still be used on another device. If the token expires based on the time limit you entered, you must generate another enrollment token.