This guide applies to Android devices
How It Works
You configure the enrollment portal, choose a Blueprint, and share the Blueprint link with users. Users open the link on a secondary device (they can’t use the device they’re enrolling), sign in if you require authentication, and follow the instructions to scan the QR code. Android Enterprise creates a work profile on the device and it is managed according to your Blueprint.Android Enrollment Requirements
Before enrolling Android devices, ensure you have:- Android Enterprise configured in Iru Endpoint
- Super admin access to your organization’s Google Admin console (learn more about super admin roles)
- Company-owned devices in factory reset state
- Android 7.0 or later for QR code enrollment
- Blueprint configured for Android devices
Work Profile Enrollment Setup
Configure Enrollment Portal
a. Go to Endpoint → Enrollment → Manual Enrollment in Iru Endpoint.b. Ensure the Enrollment Portal is active.c. Under Choose an enrollment method, select Android work profile and locate the desired Blueprint. Copy the Blueprint link for that Blueprint. If Require authentication is enabled on the Blueprint, end users will need to authenticate to view the instructions.
Configure authentication
a. Click the Blueprint and select Require authentication if you want users to authenticate prior to enrollment. Optionally check Assign user to device record to match the authenticated user to a user in your directory integration.b. This integrates with your SSO configuration for secure enrollment. If you see a banner that No single sign-on connections are configured, go to Access (Account Menu Button → Access) and configure Single sign-on. See SSO Setup for setup steps.
Android Enrollment Process
User Enrollment Steps
When users open the Blueprint link on a different device (computer, tablet, or phone), they’ll authenticate using SSO if you’ve enabled that option, then see enrollment instructions including a QR code. They’ll scan the QR code with their Android device to set up a work profile. Once the work profile is created, the device gets enrolled and configured according to your Blueprint settings.Work Profile Setup
The enrollment process creates a work profile on the Android device and configures it according to your assigned Blueprint settings. The device is then registered with Iru Endpoint for management.Android Management Features
Once enrolled, you can manage work profiles for company-owned devices, deploy applications within the work profile, and enforce policies for compliance monitoring. Iru Endpoint provides security configuration, full device inventory, and reporting.Work Profile Benefits
The work profile approach provides clear separation between personal and work data, ensuring user privacy while maintaining work security. Personal data remains private and unmanaged, while work data can be managed and secured according to your company policies. This gives users the flexibility to use their personal device while maintaining work security.Best Practices
Devices must be in factory reset state for enrollment, so test your Blueprints on designated devices before enrolling production hardware. Enable SSO authentication for secure enrollment and provide clear instructions to users about the Android enrollment process. You can monitor enrollment success and troubleshoot issues using the Activity page.Troubleshooting
Trial tenant device limit
Trial tenants are limited to a total of 10 devices. Once this limit is reached, a banner will be displayed until the device count becomes less than 10 again.Common Issues
If enrollment fails, check your Android Enterprise configuration and device state. For authentication issues, ensure SSO is properly configured and users have the necessary access. Verify that work profiles can be created on the device and that Blueprint policies are applied after enrollment.Support Resources
Check the Activity page for enrollment logs and errors, and review Device records for enrollment status. Contact Support if you need additional assistance. For detailed information about Android enrollment, see Configuring Android Enrollment and User Experience with Android Enrollment.Next Steps
After setting up Android enrollment:Test enrollment
Test the process with a few Android devices and monitor compliance and policy enforcement on the Activity page.
Set up enrollment for other platforms (optional)
To enroll Apple or Windows devices as well, see Apple Enrollment or Windows Enrollment.