Knowledgebase
Safetica Mobile enrollment
Posted by Jan Henek, Last modified by Štěpán Horký on 18 November 2019 05:47 PM

Safetica Mobile connects mobile devices with WebSafetica via invitations bonded to the user. Invitation is sent on user's email by WebSafetica administrator. From then It stays active until WebSafetica administrator decides to deactivate it, or to send new invitation. This workflow allows to enroll multiple devices under one user. Android devices could be however enrolled also by using QR code or PIN. More about other enrollment options follows below.

 

Enroll device 

Doesn’t matter if you want to enroll Android or iOS device, your first step begins with sending an invitation from WebSafetica: 

  1. in WebSafetica open Device Management > Mobile Devices and click on Invite users, 
  2. choose users you want to send invitation to. You can also edit their email addresses here, 
  3. click on Send invitation. 

For each active invitation belongs an enrollment credentials. You can view them by clicking on "Show" line in Credentials column. Pop-up window contains a QR code and a PIN (used by Android app) or deployment URL, which is an invitation transformed into link. More about the credentials window is written in section Invitation credentials under Manage enrolled devices 

Invitations

Invitations are managed in Invitations view which can be found in Management > Mobile devices > Invitations. Here you can choose which users you want to enroll, edit or deactivate. Once the invitation is sent, it is active, and users can enroll as many devices as they want. There are two ways, how to deactivate active invitation: 

  1. use button in management view 
  2. send new invitation. In this case the old invitation is deactivated, and new invitation becomes active. 

Enroll device using invitation 

  1. Open invitation in mailbox and click on Accept invitation. 
  2. Choose ownership according to device usage. 
  3. Depending on the device platform next steps will be: 

iOS 

  1. You'll be redirected to profile installation. Approve needed permissions (Device management). 
  2. Application will start to download shortly, allow its installation and move on desktop. 
  3. Run Safetica Mobile from desktop and allow rights for notification and localization. 

Android 

  1. You'll be redirected to Google Play with Safetica Mobile application, choose Install and approve rights for Device management. 
  2. Open Safetica Mobile and approve needed permissions. 

Alternative ways of enrollment 

Android using QR code 

  1. Install Safetica Mobile app from Google Play and open it. 
  2. Choose ownership according to device usage. 
  3. Approve permission to use camera. 
  4. Go to email with invitation / open invitation credentials in WebSafetica and scan QR code. 
  5. Approve needed permissions. 

Android using PIN 

  1. Install Safetica Mobile app from Google Play and open it. 
  2. Choose ownership according to device usage. 
  3. Reject camera permissions. 
  4. Fill user email and PIN. You can find PIN in invitation or in invitation credentials in WebSafetica. 
  5. Approve needed permissions. 

Installation by enrollment URL 

  1. Copy enrollment URL from invitation credentials in WebSafetica and send it by any communication channel to device. 
  2. Open received URL on mobile device and continue same way as in section Mobile device using invitation. 

Manage enrolled devices 

Once you sent all invitations, rest of enrollment depends on user activity. If you can enroll all Android devices by yourself, easiest way is to go through invitation or to just download Safetica application from Google Play and then scan QR code in WebSafetica. All other options request some user cooperation. Mobile devices view will help you to monitor state of enrollment. You can see users progress in column “State”, or you check device connectivity in column Last connection.

 

Enrollment workflow in Mobile devices 

Sent invitation represents slot for at least one device in Mobile devices view. Administrator can monitor enrollment progress without switching views from Invitations back to Mobile devices. Until device sends a response to the server, invitation is displayed with last known state and is treated as an invitation item. You can deactivate it or display enrollment credentials of user.  

Once mobile device sends first information, invitation slot changes to a device item and displays enrollment progress. From now on, it is treated as a device, so it can be deleted or notified with renewing function. After receiving all necessary information from device, row will appear as an enrolled device and leads to the device detail with technical information and anti-theft operations. 

Renew button 

Renew button is fast and easy way how to troubleshoot not responding devices. User receives email notification he’s device doesn’t communicate. There is also a QR code and a PIN in case he will need to re-enroll an Android application. Email also contains a button to forward user to the Safetica Mobile application or to the Google Play (on Android) in case the application isn’t installed. Renewing email doesn’t create new invitation and doesn’t change PIN or QR code. It only notifies user about problem and offers a solution.  

Invitation credentials 

Every invitation has its unique enrollment credentials, which can be displayed in Invitation or Mobile devices view (if there is no enrolled device yet) and serve as alternative way for enrollment. As credentials we mean: 

  1. QR code (Android device only) can be scanned from application, if user installed app from Google Play without using email invitation or when something went wrong. 
  2. PIN (Android device only) can be entered with user email in application, if user installed app from Google Play without using email invitation or when something went wrong. 
  3. Enrollment URL is invitation transformed into a single link. Administrator can send it by his preferred communication channel. 

Troubleshooting 

If there is a problem with mobile device enrollment, look at its state and time of last connection. 

Invitation troubleshooting 

In case you still see invitation as sent to user, you can easily track user activity, which is defined by two invitation states: 

  1. Invitation sent, means that user did not even open invitation. You can contact user and ask him to inspect inbox folder, or into spam folder. 
  2. Invitation opened, means that user has opened invitation, but hasn't finished the enrollment. Usually user stops before installing application/ MDM profile or doesn't open installed application. 

Device troubleshooting 

In case you instead of device name see gray text "Pending...", application or MDM profile enrollment stopped somewhere after installing Safetica Mobile. You should contact user experiencing this problem and ask him to finish the enrollment while he is connected to the Internet. To make this contact easy, WebSafetica offers "Renew" function, which sends notifying email to user. This email can lead user through enrollment process from invitation or open Safetica Mobile application, if present, and complete the enrollment. 

In case that device was once enrolled and now its state has changed from Active MDM to anything else, Safetica Mobile lost some of the crucial permissions to work correctly or is unable to synchronize due to poor connection. First step in order to solve this problem can be sending of a "Renew" email. It notifies user about possible problem with his device and leads him into application, or through the whole enrollment process again, in case he uninstalled Safetica Mobile. 

(2 vote(s))
Helpful
Not helpful