Configure direct enrollment with Workspace ONE in the Workspace ONE UEM console. Navigate to Groups & Settings > All Settings > Device & Users/General/Enrollment. The Workspace ONE Device Enrollment Options Table lists the menu items that can be configured.
The Enrollment settings page lets you configure options related to device and user enrollment. The page is divided into tabs which are described below. For detailed information about configuring device enrollment, see the VMware Workspace ONE UEM Mobile Device Management guide.
|Enrollment Tab||Configurable Menu Items for Direct Enrollment to Workspace ONE|
Directory users are supported.
In addition, SAML plus Active Directory Users are supported "on-the-fly". SAML without LDAP users are supported when the user record exists in Workspace ONE UEM at the time of the initial login.
For Devices Enrollment Mod, only Open Enrollment is supported. Registered Devices Only is not supported.
|Management Mode||Devices enrolled through the Workspace ONE Intelligent Hub app are MDM managed. This tab is used to enable or disable iOS and Android for this service.|
All grouping menu options are compatible with Workspace ONE direct enrollment.
Sync Users Groups in Real Time for Workspace ONE is enabled by default. When a device is enrolling, Workspace ONE UEM makes a real-time call to Active Directory to sync the user's user groups. If the user does not exist in Workspace ONE UEM, the Workspace ONE UEM console first syncs the user and then syncs the user groups in real time. If this feature is not enabled, the Workspace ONE UEM console does not sync the user groups.
Note: This feature is CPU-intensive. If user groups are not frequently changing or the user groups already exist in Workspace ONE UEM, disable this setting for improved performance and to prevent latency issues when launching the Workspace ONE app.
See Placing Devices in the Correct Organization Group section in #GUID-0B7AEAB9-79FD-4999-9DF0-035FC21491AF.
The two optional prompts that can be enabled are Prompt for Ownership Type and Enable Device Asset Number Prompt. The request to enter the asset number is only prompted for when the ownership type is Corporate Owned.
Customization menu options supported.
Use specific Message Template for each Platform can be enabled, but specific Workspace ONE message templates are not available for Workspace ONE 3.2.