QR Code Configuration for Android Company Owned Devices

QR Code or Device Enrollment Configurations are a quick and easy way to enroll your Android devices. By creating a QR Code configuration, you can choose the default Group or Profile and a naming convention for the devices that are enrolled using this QR Code.

QR Code enrollment allows you to skip the entire process of entering/sharing credentials or license keys and cuts down the time of enrollment. 

The feature works for both EMM & Non-EMM devices, that is it can be used with devices where Scalefusion has been downloaded via afw#mobilock or where Scalefusion has been downloaded from Google PlayStore.
This document is to create a configuration for your Corporate or Kiosk devices. If you are looking to enroll employee owned (BYOD) devices please refer to our Managing Employee Owned devices guide.

This tutorial guides you through the process of creating a QR Code configuration & how to use Scalefusion app to enroll using QR Codes.

Before You Begin

✅ You have created at least one Android Profile on Scalefusion Dashboard.

✅ Scalefusion app with Android v3.6.0 or above has been installed on device.

How It Works

In brief,

  1. Administrators of Scalefusion Dashboard can create QR codes and distribute it to their employees or IT team.
  2. Employees or IT team can download the Scalefusion app from Google Play Store and scan the QR Code. Once the QR code is scanned, permissions page is shown directly.

Create a QR Configuration on Scalefusion Dashboard

  1. Once you are logged into Dashboard, navigate to Enrollment Configurations ➞ QR Code Configurations.
  2. Click on CREATE.
  3. This will open the configuration creator dialog, which is divided into 3 sections as explained below,
    1. Basic: Use this section to set the following:
      1. Configuration Name: A name for this configuration 
      2. Choose Enrollment Type: Choose Kiosk/Agent. This will be used to create a configuration that will be used to enroll corporate devices.
      3. Choose Enrollment Method: Select Enrollment Method from of the following:
        1. Userless Enrollment (Selected by default): On selecting this option, no user authentication will be asked for at the time of enrollment.
        2. User Authenticated Enrollment: Selecting this will ask for user authentication at the time of enrollment associating user with the device. For enabling User Authenticated Enrollment, following criteria should be fulfilled:
          1. The account should have some users added or imported.
          2. The account should have Organization Info and Terms of Services configured.
            User Authenticated Enrollment will not be applied to Android devices if you have setup Android Enterprise using G-Suite.
      4. Device Naming Convention: Choose a naming convention that will be used to auto-generate device names when the devices are enrolled using this configuration.
    2. Group/Profile: In this section select the Device Group or Profile, that will be applied to the devices that enroll using this configuration. For Kiosk type enrollment configurations only Android Kiosk Profiles can be selected.
      Apply Enrollment Rules: If any enrollment rules are defined in Global settings, they get applied when a device is enrolled using this configuration. Disable this setting to skip applying the rules for enrollment using this configuration.
    3. Device Configuration: Following are the additional settings which can be configured under this:
      1. Allow Users to Enter a Name for Device: If this is selected then users are allowed to set the device name from the device when they enroll it.
      2. Allow Users to Scan a QR or enter Group Enrollment Code to complete Enrollment: Enabling this will show a screen at the end of enrollment that will allow users to scan a QR Code or enter Group Enrollment code to move the devices to respective group before they start using the device. When the devices move to specific group, the device profile of the group gets applied to the devices.
      3. Allow Users to Enter values for Custom Properties: When this flag is selected, users can set values for the custom fields (from the device at the time of enrollment) that are defined through Custom properties. For each custom field following can also be configured from here:
        Allow: Shows or hides the custom field to the user
        Required: Select if the field is optional or required.
      By default these settings are unchecked
    4. Optional Settings : This is an optional section and can be left blank.
      Device Licence: Set a default license for the devices enrolled using this configuration. If the selected licenses has no free slots or this option is left blank, then the next available license is used to enroll the device.
      Configure Additional Enrollment Settings: Following settings can be configured additionally to speeden up the enrollment process when you are enrolling via 6-times tap or ZeroTouch and scan a QR.
      These are applicable only on Android Devices

      Setting

      Description

      Enable System Apps

      This will allow admins to disable system apps during enrollment. This helps in removing the bloatware which consumes data or CPU/RAM in the background when the device is locked in Kiosk mode. By default it is set to ON

      Select Default Language

      This helps Admins set a default language for the device. Select a language from the drop-down and it will be set on the device. The selected language should be available on the device.

      Select Default Timezone

      Allows admins to select a default timezone that the device will be set to once enrolled.


      Configure Wifi: Configure Wifi settings which will get applied to the device when it gets enrolled with this configuration.

Once you have filled in all the details in the 3 sections, click on SAVE to save the configuration.

  1. Once the configuration is saved, it will appear in the Device Enrollment Configuration list.
    For Android devices, click on the button ‘Show Android QR’ under the Android tab. This will show the QR code which can be used to scan using Scalefusion app on your device and enroll it.
    You can search for a particular configuration using Search feature and also sort the configurations by Configuration name. (Please see screenshot below)
  1. Following additional actions can be performed on a configuration:
    1. Download Config - This will download the configuration file that can be used to auto-enroll Android devices, by copying them to /sdcard/.
    2. Email - This will send an email to your account with QR Code and the details on how to set up.
    3. Edit - Helps you in editing the Configuration. Note that editing won’t impact the devices that are already enrolled.
    4. Deactivate - If you no longer wish to use this configuration or think it is compromised, then you can deactivate the config.
    5. Rotate - If you think that the configuration is compromised, you can use this option. This will generate a new QR Code and URL. Note that the previous QR Code and URL will no longer be valid.
Enrolling a device through a QR Code DOES NOT skip the permissions page. These device level permissions need to be given manually during the setup process on device.

Steps on Scalefusion App

If you are setting up the device using afw#mobilock, please refer to the guide here. If you have downloaded the app from Google Play Store or installing directly via Scalefusion apk, then follow the below steps.
  1. Install the latest Scalefusion app.
  2. Open the QR Code image or view it on Dashboard, clearly.
  3. Launch Scalefusion app.
  4. Click on Enroll button.
  5. Click on Corporate tab and select QR Code.
  6. You would be shown a Camera View. Point this Camera to the QR Code on your screen so that en entire QR Code fits in the frame and can be scanned.
  7. If the QR Code is valid and your account has valid licenses, then the device will login and show you the permissions screen.
  8. Proceed to grant all the required permissions to Scalefusion app and complete the setup.
For devices that are enrolled using afw#mobilock, after the Scalefusion app is launched, a Camera view will be shown directly so that the QR Code can be scanned. Click on the back arrow on the screen, If you want to use other enrollment options on these devices.
If the flags under Device Configuration (In QR Code Configuration) are checked, then after granting Permissions you will get a screen where you can set the device name and custom values.

For a complete step by step guide on how to enroll your corporate owned Android devices, please refer to our guide on Enrolling Corporate-Owned devices.


How did we do?


Powered by HelpDocs (opens in a new tab)