Supports device enrollment as part of device provisioning by default

Administrators configure additional attribute, force_enrollment_before_provisioning, to enroll devices before device provisioning.

Previously, the force_enrollment_before_provisioning configuration was set to YES by default only for WPCO enrollments. For DO enrollments, Administrators must manually set it to YES in the enrollment confirmation. For more information, see https://www.ibm.com/support/pages/node/6841251.

In this release, the force_enrollment_before_provisioning configuration is also set to YES by default for DO enrollment. MaaS360 enrolls the device on a factory reset as part of device provisioning to enforce management and policies automatically before users use the device.

To enroll after device setup, the additional attribute force_enrollment_before_provisioning must be set to NO when creating the enrollment configuration for QRcode, KME, and Zero-Touch enrollments. For token-based enrollments, users will always enroll the device before device provisioning, as there is no option to set the force_enrollment_before_provisioning configuration to NO.

Note: This feature is available only on Android OS version 11 devices and later.

The path to do enrollment configuration in the MaaS360 portal:  Devices > Other Enrollment Options > Android > Android Device Enrollment > Additional Settings:

Select the Enrollment mode:

Turn on the toggle to Yes for Additional settings:

Configure force_enrollment_before_provisioning:

Impact on COSU devices

MaaS360 introduced a new kiosk state, Device Provisioning Pending in Kiosk mode.

For DO enrollments, when the user enrolls before device provisioning, and Kiosk is set as the default policy, if the device setup is in progress after completing enrollment, the new Kiosk status Device Provisioning Pending is displayed on the Device summary page in the MaaS360 portal. For more information, see https://www.ibm.com/support/pages/node/7023191.

Note: The new Kiosk status, Device Provisioning Pending, will be changed only after completing the device setup.