Description
Account-Driven User Enrollment allows for personal devices to be enrolled into Jamf Pro by signing into a Managed Apple ID in the Settings app. Only the organization's accounts, settings and the information provisioned by Jamf Pro will be managed. The user's personal account will not. For more information of what MDM can and cannot do, see User Enrollment and MDM from the Apple Platform Deployment.
Account-Driven User Enrollment Requirements
Jamf Pro 10.33.0 or later, with Account-Driven User Enrollment enabled for personally owned devices
Personally owned mobile devices with iOS or iPadOS 15
A valid push certificate in Jamf Pro
JSON file hosted on a web server with defined Jamf Pro enrollment information
Managed Apple Accounts in Apple Business Manager or Apple School Manager
This article outlines the steps needed to enroll devices using Account-Driven User Enrollment and links resources to complete the setup.
Enrolling Devices with Account-Driven User Enrollment
Enable Account-Driven Enrollment for Personally Owned Devices in Jamf Pro
In Jamf Pro go to Settings > Global and select User-Initiated Enrollment.
Click iOS and click Edit in the bottom-right corner.
Check the box for Enable for personally owned devices under Account-Driven User Enrollment.
Click Save.
(Optional) Customize Enrollment Portal messaging
In Jamf Pro go to Settings > Global and select User-Initiated Enrollment.
Click Messaging and click Edit in the bottom-right corner.
Click the Edit button on the far right side of the language configured you want to customize.
Change the fields as desired.
Click Save on the pop-up form.
Click Save in the bottom-right corner.
Create and host JSON file
See Defining Jamf Pro Enrollment Information for Account-Driven User Enrollment and Hosting Jamf Pro Enrollment Information on a Web Server for Account-Driven User Enrollment sections on the Setting up Account-Driven User Enrollment page in the Jamf Pro Documentation.
(Optional) Configure Enrollment SSO
Test enrollment by clicking Sign in to Work or School Account on a device under Settings > General > VPN and Device Management. The user experience is outlined in Account-Driven User Enrollment Experience.