Safetica Mobile enrollment
Posted by Jan Henek, Last modified by Štěpán Horký on 18 November 2019 05:47 PM
Safetica Mobile connects mobile devices with WebSafetica via invitations bonded to the user. Invitation is sent on user's email by WebSafetica administrator. From then It stays active until WebSafetica administrator decides to deactivate it, or to send new invitation. This workflow allows to enroll multiple devices under one user. Android devices could be however enrolled also by using QR code or PIN. More about other enrollment options follows below.
Doesn’t matter if you want to enroll Android or iOS device, your first step begins with sending an invitation from WebSafetica:
For each active invitation belongs an enrollment credentials. You can view them by clicking on "Show" line in Credentials column. Pop-up window contains a QR code and a PIN (used by Android app) or a deployment URL, which is an invitation transformed into link. More about the credentials window is written in section Invitation credentials under Manage enrolled devices
Invitations are managed in Invitations view which can be found in Management > Mobile devices > Invitations. Here you can choose which users you want to enroll, edit or deactivate. Once the invitation is sent, it is active, and users can enroll as many devices as they want. There are two ways, how to deactivate active invitation:
Enroll device using invitation
Alternative ways of enrollment
Android using QR code
Android using PIN
Installation by enrollment URL
Manage enrolled devices
Once you sent all invitations, rest of enrollment depends on user activity. If you can enroll all Android devices by yourself, easiest way is to go through invitation or to just download Safetica application from Google Play and then scan QR code in WebSafetica. All other options request some user cooperation. Mobile devices view will help you to monitor state of enrollment. You can see users progress in column “State”, or you check device connectivity in column Last connection.
Enrollment workflow in Mobile devices
Sent invitation represents slot for at least one device in Mobile devices view. Administrator can monitor enrollment progress without switching views from Invitations back to Mobile devices. Until device sends a response to the server, invitation is displayed with last known state and is treated as an invitation item. You can deactivate it or display enrollment credentials of user.
Once mobile device sends first information, invitation slot changes to a device item and displays enrollment progress. From now on, it is treated as a device, so it can be deleted or notified with renewing function. After receiving all necessary information from device, row will appear as an enrolled device and leads to the device detail with technical information and anti-theft operations.
Renew button is fast and easy way how to troubleshoot not responding devices. User receives email notification he’s device doesn’t communicate. There is also a QR code and a PIN in case he will need to re-enroll an Android application. Email also contains a button to forward user to the Safetica Mobile application or to the Google Play (on Android) in case the application isn’t installed. Renewing email doesn’t create new invitation and doesn’t change a PIN or a QR code. It only notifies user about a problem and offers a solution.
Every invitation has its unique enrollment credentials, which can be displayed in Invitation or Mobile devices view (if there is no enrolled device yet) and serve as alternative way for enrollment. As credentials we mean:
If there is a problem with mobile device enrollment, look at its state and time of last connection.
In case you still see invitation as sent to user, you can easily track user activity, which is defined by two invitation states:
In case you instead of device name see gray text "Pending...", application or MDM profile enrollment stopped somewhere after installing Safetica Mobile. You should contact user experiencing this problem and ask him to finish the enrollment while he is connected to the Internet. To make this contact easy, WebSafetica offers "Renew" function, which sends notifying email to user. This email can lead user through enrollment process from invitation or open Safetica Mobile application, if present, and complete the enrollment.
In case that device was once enrolled and now its state has changed from Active MDM to anything else, Safetica Mobile lost some of the crucial permissions to work correctly or is unable to synchronize due to poor connection. First step in order to solve this problem can be sending of a "Renew" email. It notifies user about possible problem with his device and leads him into application, or through the whole enrollment process again, in case he uninstalled Safetica Mobile.