You must enroll a device before you can manage it with Workspace ONE UEM. There are multiple enrollment paths, each path with options. For detailed walk throughs about bulk enrolling BYOD, COPE, and Shared Devices, see How Do You Enroll Devices in Workspace ONE UEM?
Before you start the enrollment process, there is something you must understand about the top level organization group (OG), commonly known as Global. There are several reasons enrolling devices directly to Global is not a good idea. These reasons are multitenancy, inheritance, and functionality.
You can make as many child organization groups as you want and you configure each one independently from the others. Settings you apply to a child OG do not impact other siblings.
Changes made to a parent level OG apply to the children. Conversely, changes made to a child level OG do not apply to the parent or siblings.
There are settings and functionality that are only configurable to Customer type organization groups. These settings include wipe protection, Telecom, and personal content. Devices added directly to the top-level Global OG are excluded from these settings and functionality.
The Global organization group (OG) is designed to house Customer and other types of OGs. Given the way inheritance works, if you add devices to Global and configure Global with settings intended to affect those devices, you are also affecting all the Customer OGs underneath. This undermines the benefits of multitenancy and inheritance.
Enrolling a device with the Workspace ONE Intelligent Hub is the main option for Android, iOS, and Windows devices in Workspace ONE Express and Workspace ONE UEM.
Download and install the Workspace ONE Intelligent Hub from the Google Play Store (for Android devices) or from the App Store (for Apple devices).
Downloading the Workspace ONE Intelligent Hub from public application stores requires either an Apple ID or a Google Account.
Windows 10 devices must point the default browser on the device to https://getwsone.com to download the Hub.
Run the Workspace ONE Intelligent Hub upon the completion of the download or return to your browser session.
Important: To ensure a successful installation and running of the Workspace ONE Intelligent Hub on your Android device, it must have a minimum of 60 MB of space available. You can allocate CPU and Run Time Memory on a per app basis on the Android platform. If an app uses more resources than allocated, Android devices optimize themselves by stopping such an app.
Enter your email address when prompted. The Workspace ONE console checks if your address was added to the environment. In which case, you are already configured as an end user and your organization group is already assigned.
If the Workspace ONE console cannot identify you as an end user based on your email address, you are prompted to enter your Server, Group ID, and Credentials. Your Administrator can provide the environment URL and group ID.
Finalize the enrollment by following all remaining prompts. You can use your email address in place of user name. If two users have the same email, the enrollment fails.
The device is now enrolled with the Workspace ONE Intelligent Hub app. In the Summary tab of the Device Details View for this device, the security panel displays “Hub Registered” to reflect this enrollment method.
For more information, see Device Details.
Workspace ONE UEM makes the enrollment process simple, using an email-based autodiscovery system to enroll devices to environments and “customer” type organization groups (OG). Autodiscovery can also be used to allow end users to authenticate into the Self-Service Portal (SSP).
Note: To enable an autodiscovery for on-premises environments, ensure that your environment can communicate with the Workspace ONE UEM Autodiscovery servers.
The server checks for an email domain uniqueness, only allowing a domain to be registered at one organization group in one environment. Because of this server check, register your domain at your highest-level “customer” type organization group.
Autodiscovery is configured automatically for new Software as a Service (SaaS) customers.
Autodiscovery Enrollment simplifies the enrollment process enrolling devices to “customer” type organization groups (OG) using end-user email addresses. Configure an autodiscovery enrollment from a “customer” type OG by taking the following steps.
What to do next: Instruct end users who enroll themselves to select the email address option for authentication, instead of entering an environment URL and Group ID. When users enroll devices with an email address, they enroll into the same group listed in the Enrollment Organization Group of the associated user account.
In some unique cases, you can adjust the enrollment process into Workspace ONE UEM for specific organizations and deployments. For each of the additional enrollment options, end users need the credentials detailed in the Required Information section of this guide.