Endpoint Services, Workspace ONE, Enrolling Devices into Workspace ONE

How to enroll devices into the Workspace ONE service.


Workspace ONE Unified Endpoint Management (UEM)

Affected Customers

University of Illinois IT Pros leveraging Technology Services Endpoint Service Workspace ONE UEM

General Information

Once your unit has been provisioned in Workspace ONE, you may begin enrolling devices using the following methods.

Device Enrollment Program (DEP) (macOS, iOS, and tvOS)

The EPS service can stage DEP-eligible Apple devices for enrollment into Workspace ONE. To request device enrollment, or to have DEP-eligible devices enabled for enrollment, please submit an EPS support request, selecting Workspace ONE from the 'Service' dropdown, DEP Enrollment from the 'Request Type' dropdown, and completing all fields.

Learn more about Apple's Device Enrollment Program.

Ensure that your device purchases are DEP-eligible.

Multi-Tenant-Munki (macOS 10.15 and below)

Workspace ONE enrollment profiles may be exported and packaged for deployment by the EPS Multi-Tenant-Munki service, but only on macOS 10.15 and below, as macOS 11 has removed the ability to install any profiles using command-line tools such as Munki.

Approving Munki-installed Enrollment Profiles (macOS 10.15 and below)

After a Workspace ONE enrollment profile has been installed by Munki, it must be manually approved on the device in order to complete enrollment. This only needs to be done once, and can be done by any user on the Mac, including a standard (non-admin) user. To approve an enrollment profile:

Manual Enrollment via the Workspace ONE Agent (Android, iOS, macOS, tvOS, and Windows)

**Please note that when enforcing SD card encryption, the Android security profile will ERASE unencrypted SD cards prior to encryption. For this reason, the EPS team strongly recommends that Android devices and SD cards be backed up prior to Workspace ONE enrollment in order to prevent accidental data loss.**

All supported platforms allow manual enrollment via the Workspace ONE agent.

Once a device is successfully enrolled, you may begin managing it in the Workspace ONE console.

Manual Enrollment via URL (macOS and Windows)

Sign in to the device you wish to enroll and do the following:

Contact the EPS team