This guide applies to Android devices
Prerequisites
Before you begin, ensure you have:- Super administrator access to your organization’s Google Admin console (learn more about super administrator roles)
- Company-owned devices in factory reset state for enrollment
- Android 13 and higher
- Third-party Android mobile Management enabled in Google Workspace (see steps below)
Enable Third-Party Android Mobile Management in Google Workspace
1
Sign in to Google Admin console
In a web browser, use your organization’s super administrator account to sign in to your organization’s Google Admin console at admin.google.com.
2
Open Third-party integrations
Go to Devices → Mobile & endpoints → Settings → Third-party integrations.
3
Select organization unit and Android EMM
Select the related organization unit, then select the Android EMM block.
4
Enable and save
Check the box for Enable third-party Android mobile management, then select SAVE.
Enable Android Platform
Only users with the Account Owner role can enable or disable platforms. See Team Member Role Permissions for more details.
1
Navigate to the Account Menu Button
In Iru Endpoint, in the sidebar, select the Account Menu Button.
2
Open Organization profile
Select Organization in the menu.
3
Open the Endpoint tab
Select the Endpoint tab.
4
Edit platforms
Under Platforms you use, select Edit.
5
Select Android and select Save changes
Select Android (and optionally Windows if you plan to manage both platforms), then select Save changes at the bottom of the page.
You can optionally enable the Windows platform at the same time when selecting platforms.
Configure Android Enterprise
Only the Account Owner can configure Android Enterprise. See Team Member Role Permissions for roles and permissions.
1
Open Integrations
In the sidebar, select the Account Menu Button, then select Integrations.
2
Select Android
Under Platform integrations, select Android.
3
Configure Android Enterprise
Select Configure Android Enterprise.
4
Enter integration name
Enter a name for your Android Enterprise integration.
5
Sign in with Google
Select Continue with Google and sign in with a Google Workspace super administrator account. Select Next when prompted (your Iru Endpoint admin email may be pre-filled).
6
Allow device management
Select Allow to allow Iru Endpoint to manage your Android devices.
7
Configure work profile sign-in
Choose how users sign in to the work profile: select Enable to allow users to sign in with their managed Google Account, or select Skip to prevent sign-in with a managed Google Account in the work profile.
8
Return to Integrations page
You will be redirected back to the Integrations → Platform integrations → Android page.
9
Verify integration
Verify that the Android Enterprise integration is active and configured.
Keep a note of the Enterprise ID shown here; you will use it in the next section when selecting the EMM provider in Google Workspace.
Set EMM in Google Workspace
After configuring Android Enterprise in Iru, return to Google Workspace and select the EMM that matches the Enterprise ID shown in Iru. This links your Google organization to the Iru Endpoint Android integration.1
Sign in to Google Admin console
In a web browser, use your organization’s super administrator account to sign in to your organization’s Google Admin console at admin.google.com.
2
Open Third-party integrations
Go to Devices → Mobile & endpoints → Settings → Third-party integrations.
3
Select organization unit and Android EMM
Select the related organization unit, then select the Android EMM block.
4
Select the EMM that matches Iru
Enable third-party Android mobile management if not already enabled, then select the EMM that matches the Enterprise ID from your Iru Endpoint Android integration.
5
Save
Select SAVE.
Disconnecting Android Enterprise
Disconnect the Android Enterprise integration from Iru Endpoint. Iru coordinates the EMM binding cleanup with Google when you disconnect.1
Delete Android device records (if applicable)
If you are removing management from enrolled devices, delete each Android device record from Iru Endpoint first. See Deleting a Device Record and Uninstalling Iru Endpoint.
2
Open Integrations
In the sidebar, select the Account Menu Button, then select Integrations.
3
Select Android
Under Platform integrations, select Android.
4
Disconnect Android Enterprise
Select Disconnect.
Only the Account Owner can disconnect the Android Enterprise integration. See Team Member Role Permissions.
Android Management Requirements
Before enrolling Android devices, ensure you have completed the Prerequisites above and have:- Android Enterprise configured in Iru Endpoint (completed in this guide).
- Blueprint configured for Android devices.
- (Recommended) Single sign-on (SSO) configured for secure authentication.
Android Management Capabilities
Iru Endpoint provides the following Android management features:- Work profile management for company-owned devices.
- Application deployment and management.
- Policy enforcement and compliance monitoring.
- Security configuration and updates.
- Device inventory and reporting.
Considerations
- Account Owner required: Only the Account Owner can configure Android Enterprise.
- Google Admin access: You need admin access to the Google Admin console.
- Factory reset required: Devices must be in factory reset state for enrollment.
- Work profile only: Iru Endpoint supports company-owned work profile management.
- Disconnect through Iru: Select Disconnect on the Android Enterprise integration in Iru Endpoint, not in Google Admin. See Disconnecting Android Enterprise.
Next Steps
After configuring Android Enterprise:1
Configure Blueprints and Library
Create and configure Blueprints so policies and apps are ready before enrollment. See Configuring Blueprints and Managing Library.
2
Enable other platforms (optional)
To manage Apple devices or Windows computers as well, see Apple Setup or Windows Setup.
3
Set up enrollment for each platform
Once Blueprints are configured, set up enrollment: Android Enrollment, Apple Enrollment, or Windows Enrollment.