Skip to main content
This guide applies to Android devices

About Android Enrollment

Android enrollment allows you to add Android devices to Iru Endpoint for centralized management using work profiles. This approach provides clear separation between personal and work data while maintaining user privacy and enabling comprehensive device management.

How It Works

Android enrollment uses the Android Enterprise integration to create work profiles on company-owned devices. Users access an enrollment link that guides them through setting up a work profile, which connects the device to Iru Endpoint for management according to your Blueprint configuration.

Android Enrollment Requirements

Before enrolling Android devices, ensure you have:
  • Android Enterprise configured in Iru Endpoint
  • Google Admin console access with appropriate permissions
  • Company-owned devices in factory reset state
  • Android 7.0 or later for QR enrollment support
  • Blueprint configured for Android devices

Work Profile Enrollment Setup

1

Configure Enrollment Portal

  1. Login to the Iru Endpoint Web App and navigate to Enrollment > Manual Enrollment
  2. Under Choose an enrollment method, select Android work profile
  3. Locate the desired Blueprint and copy the Blueprint link
2

Configure Authentication

  1. If Require authentication is enabled, end users will need to authenticate to view enrollment instructions
  2. This integrates with your SSO configuration for secure enrollment
3

Share Enrollment Information

  1. The Blueprint link provides enrollment instructions to end users
  2. Distribute the link to end users to enroll company-owned Android devices with work profile
  3. Provide instructions for the Android enrollment process

Android Enrollment Process

User Enrollment Steps

When users access the enrollment link on a different device (computer, tablet, or phone), they’ll authenticate using SSO if you’ve enabled that option, then receive enrollment instructions including a QR code. They’ll scan the QR code with their Android device to set up a work profile. Once the work profile is created, the device gets enrolled and configured according to your Blueprint settings.

Work Profile Setup

The enrollment process creates a work profile on the Android device and configures it according to your assigned Blueprint settings. The device is then registered with Iru Endpoint for management.

Android Management Features

Once enrolled, you can manage work profiles for company-owned devices, deploy applications within the work profile, and enforce policies for compliance monitoring. Iru Endpoint provides security configuration and comprehensive device inventory and reporting.

Work Profile Benefits

The work profile approach provides clear separation between personal and work data, ensuring user privacy while maintaining work security. Personal data remains private and unmanaged, while work data can be managed and secured according to your company policies. This gives users the flexibility to use their personal device while maintaining work security.

Best Practices

Devices must be in factory reset state for enrollment, so test your Blueprints on designated devices before enrolling production hardware. Enable SSO authentication for secure enrollment and provide clear instructions to users about the Android enrollment process. You can monitor enrollment success and troubleshoot issues using the Activity page.

Troubleshooting

Common Issues

If enrollment fails, check your Android Enterprise configuration and device state. For authentication issues, ensure SSO is properly configured and users have the necessary access. Verify that work profiles can be created on the device and that Blueprint policies are applied after enrollment.

Support Resources

Check the Activity page for enrollment logs and errors, and review Device records for enrollment status. Contact Support if you need additional assistance.

Next Steps

After setting up Android enrollment, test the process with a few Android devices and monitor device compliance and policy enforcement. You can then deploy applications to enrolled Android devices. For detailed information about Android enrollment, see Configuring Android Enrollment.