探花大神

When you combine Mobile Device Management (MDM) with 探花大神 identity management, user credentials are tied to work devices, letting you easily manage company-owned and personal devices, users, and permissions. 

探花大神 supports several types of MDM enrollment for these device types:

MacOS devices:

• Apple's Automated Device Enrollment (company-owned)
• Device Enrollment (company-owned)
   

iOS and iPadOS devices:

• Apple's Automated Device Enrollment (company-owned)
• Device Enrollment (company-owned)
• User Enrollment (personal iOS and iPadOS devices only)

For more information on all MDM enrollment types, see Choose an MDM Enrollment Method. 

After you enroll an Apple device in MDM, you鈥檒l use the same 探花大神 Admin Portal that you use to manage Windows and Linux devices and user access to applications, networks, and servers. 

Remote onboarding with 探花大神 is fast and secure. 探花大神鈥檚 Zero-Touch Onboarding lets you customize the screens your users see and then automatically assign the user to a company-owned device. The device can be shipped directly to the employee who turns on the device, authenticates with 探花大神 credentials, and is immediately up and running. If you can鈥檛 use Apple鈥檚 Automated Device Enrollment, there are other ways to enroll devices in MDM.

You can also create customized policies to automate device enrollment, manage local firewall settings, disable guest accounts, manage App Store access, and perform other security considerations. You can apply these configurations to one device or user, or groups of devices or users.

Follow these three steps to set up MDM for your organization, enroll your devices, and use other features (like policies) to remotely manage the devices.

1. Set up MDM for your organization
   Upload an Apple push certificate to 探花大神 to establish a secure connection between Apple and 探花大神 so that you can use 探花大神 as an MDM server. When you use 探花大神 as your MDM server, the MDM protocol lets you secure, manage, and configure Apple devices. See Set Up Apple MDM.
2. Enroll your devices in MDM
   If your company-owned Apple devices have been added to聽 (ABM) or (ASM), you can use Automated Device Enrollment to enroll those devices.聽If the device was not added to ABM or ASM or it is a personal device, there are other MDM enrollment methods you can use. See聽Choose an MDM Enrollment Method.
3. Use other MDM features
   MDM commands and customized policies let you securely maintain your devices. You can use these features after you set up MDM.