🔗 Zero-Touch Enrollment: Linking Account and Device Setup
To integrate Zero-Touch devices into the Mobile Guardian ecosystem effortlessly, start by setting up your enrollment method and connecting your Zero-Touch account.
This streamlined process involves two key phases: Dashboard Setup and Device Setup.
💻 Phase 1: Dashboard Setup
Follow these steps to configure the Mobile Guardian Dashboard and link your Zero-Touch Account for device enrollment:
Access Android Settings
- Navigate to the "Settings" on the Mobile Guardian Dashboard.
- Select "Android Settings".
- Go to Settings > Android Settings > Mobile Guardian Managed Account Enrollment.
Enrol Account and Bring Android to Work
- Follow the on-screen instructions and click "Enrol".
- You will be redirected to the "Bring Android to Work" page. Log in using a Gmail account and click "Get started".
Input Organisation Information
Configure EMM Settings
On the Android EMM Settings configuration page, select the following:
- Default Application Runtime Permission: Auto-grant
- System Update Policy: Automatic
- Active Directory Integration: Unauthenticated
- Click the "Save" button.
After the save has completed, ensure you select the Sync Profile button to ensure the Baseline Profile is active before enrolment.
Terms of Service
Schools can customise their system by providing a Terms of Service URL. By default, this field is empty, allowing each institution to define and link to its own terms and conditions.
Registration Form Fields
To ensure complete user enrollment, the Registration Fields are utilised to gather necessary data when a user registers on a device post Mobile Guardian installation.
- Mandatory Fields (Default): The Name and Surname fields are activated by default.
- Optional Fields: You have the flexibility to toggle all remaining fields on or off based on your specific registration requirements.
Link Zero-Touch Account
- Navigate to the option to link your Zero-Touch account to your EMM provider and select Next.
- Select your desired Zero-Touch account and click Link.
- Click Next to finalise the linking process.
- Ensure to select "Save" once the account is linked to the dashboard.
Success! Your Zero-Touch Account has been successfully linked. A summary of the linked account is now displayed on the Mobile Guardian Dashboard:
- Zero-Touch Account: Displays your Account ID.
- Configuration Info: Shows the number of devices linked to the account and the policies applied.
- Support Info: Contains information visible to users/students during device enrollment.
📱 Phase 2: Device Setup
Zero-touch enrollment is an automated, streamlined method for IT admins to set up Android devices for schools.
What is Zero-Touch Enrollment?
- Automated Setup: When a device is turned on for the first time and connected to the WiFi, it automatically checks for the Mobile Guardian configuration.
- Full Management: If the settings are found, the device becomes fully managed and downloads the Mobile Guardian app through the Zero-Touch setup wizard.
- Efficiency: This approach ensures a quick, easy, and secure roll-out for multiple devices.
Device Enrollment Steps
Follow these steps to set up a new or factory-reset Android device:
- Initiate Setup: Power on the new or factory-reset device and connect it to the WiFi. The device automatically checks for the Mobile Guardian configuration.
- Confirmation Screen: The screen will indicate that the device is part of an organisation. Select Next to proceed.
- Setup Wizard: Select Continue.
- Proceed: Select "Next".
- Install Work Apps: Navigate to "Install work apps" and select "Install".
- Configure Mobile Guardian: Navigate to "Configure Mobile Guardian" and select "Setup".
The device automatically applies policies, school details, and managed configurations. Upon application startup, the device is immediately locked to the Mobile Guardian application.
Terms of Service Display
If a Terms of Service URL was configured during the initial setup, the corresponding screen will be the first visible element upon device launch, requiring user acceptance to continue.
Environment & Device Naming
Following acceptance of the Terms of Service, the next screen displays the device's target Environment. The student must then name the device and check a box to acknowledge and accept the Mobile Guardian Privacy Policy and Terms.
Student Registration
Selecting "Activate" triggers the appearance of the Student Registration Fields. The contents of this form will precisely match the fields configured (enabled or disabled toggles) by the administrator.
Login Completion and Operational Mode
After the student completes the form and selects "Login," the enrollment process concludes. The device will then exit Kiosk Mode and return to normal operational mode.
Grant Permissions (Post-Installation)
After installing the Mobile Guardian app, you will be prompted to provide usage access. Authorise the following required permissions:
- Device Admin
- Package Usage Stats
- System Alert Window
After granting permissions, tap Continue. The Mobile Guardian application will open to finalise registration. Press the back button to redirect to the home screen.
You have successfully enrolled your device with Mobile Guardian.
Reviewing Registration Data
The data collected from the student during the device registration process can be reviewed by administrators on the Mobile Guardian dashboard. Locate this information by:
- Accessing the Students tab.
- Filtering the list as necessary.
- Selecting the Meta field/option to expose the saved registration details.