You’ll need to enable user enrollment for personal iOS devices in the Admin Portal, and then have each user log into the User Portal, and follow the prompts to enroll their devices. JumpCloud supports User Enrollment for iOS and iPad devices, but not for iPod or tvOS devices.
Considerations:
- Apple’s Stolen Device Protection, when activated, prevents new MDM enrollments of any kind as a preventative measure. Deactivate the feature temporarily to allow users to enroll in MDM. You can turn Stolen Device Protection back on after the device has been enrolled.
Users of enrolled personal devices need to be made aware that, in rare cases and for security reasons, the Admin can remove the enrollment and any resources that depend on the enrollment.
To allow a user to enroll a personal iOS or iPadOS device:
- Log in to the JumpCloud Admin Portal.
- Go to DEVICE MANAGEMENT > MDM > Apple.
- Scroll to the iOS Enrollment section. Under Personal Device Enrollment, select the option to Allow users to enroll personal mobile devices and access Enroll Your iOS Device in the User Portal to enable users to enroll their devices from the JumpCloud User Portal. Enabling this option allows users to access company information from their personal device.
The Managed Apple ID must be added on the user's Details tab in JumpCloud in order for the Enroll your iOS Device option to appear for the user in their User Portal.
- Select a default device group where these enrolled iOS devices will be added.
- You cannot delete the default iOS device group that you choose here. To change the default group, assign the enrolled devices to another device group, and then delete it.
- If the default device group you select is configured to update group membership dynamically, ensure that the group’s membership rules are compatible with the devices you’re expecting to auto-enroll. See Configure Dynamic Device Groups for more information.
- Instruct users to follow the enrollment instructions in Users: Enroll Your Personal iOS Device.
- After the user enrolls a personal iOS or iPadOS device in MDM, verify that the device was successfully enrolled.
- Go to DEVICE MANAGEMENT > Devices.
- Select Devices, then select the device.
- Select the MDM tab and verify that the Enrollment Type is user.