Knowledge Base > Android Device Management > Corporate Device Management > Samsung Knox Mobile Enrollment > Creating MDM Profiles for Samsung KME

Creating MDM Profiles for Samsung KME

Updated 1 year ago by Sriram Kakarala

MDM Profiles in Samsung KME portal are the enrollment configurations that can be used to enroll your Samsung devices. Creating a minimum of one MDM Profile is mandatory to manage the Samsung devices

Before you Begin

Create a Samsung Knox account and get access to Knox Mobile Enrollment Account.
Complete the Android for Work step on Scalefusion Dashboard.
Complete the Android for Work setup.
Create an Android Kiosk Device Profile.
Create a QR Code configuration with the Android Kiosk device profile.

MDM Profiles

Samsung offers two types of MDM Profiles to be created. These are,

Android Enterprise Profile: Devices enrolled via this Profile make sure that Scalefusion is setup as Device Owner and the device is setup as EMM managed. This gives you the advantage of using both the EMM and Knox features.
Device Admin Profile: This is the legacy mode of setup where the Scalefusion app gets the Knox privileges and can offer Knox features.

Irrespective of the Profile type, devices enrolled via KME ensure that if the end-user uninstalls the Scalefusion agent then the user is forced to reinstall the application.

Video Tutorial

Here is a short video that demonstrates how to create a MDM Profile

Steps

Sign In to Scalefusion Dashboard. Assuming that you have performed the pre-requisites as mentioned above, navigate to Getting Started > Android Enterprise Setup
Click on Android Zero Touch & Samsung KME Setup Tab.
Click on Create Configuration or New to launch the configuration creator wizard. In the configuration creator wizard,
1. Provide a name for this configuration.
2. From the dropdown select the QR Code which you want to enroll you Samsung devices using KME.
3. Click SAVE to save the configuration.

You can create as many KME configurations as you want and depending upon your IT needs. However for each KME configuration you would need an active QR Code configuration with Android Device Profile.

Once a configuration is saved, it will appear in the list of configurations. Expand a saved configuration and select Samsung KME tab to see the next steps.
At this point the flow shifts to Samsung KME Portal. Sign In to Samsung Knox portal and Launch KME Console
Click on the Profiles option on the left hand side and click on CREATE PROFILE button on the top-right hand side.

Samsung allows you to create profiles of the below mentioned types. Please follow the sections below to create an appropriate MDM Profile.

Android Enterprise Profile

In this type of Profile, the Scalefusion app will be set as the Device Owner app on the device. This profile allows you to leverage both the EMM Features (Android for Work) and Knox features offered by Scalefusion. We highly recommend this approach.

NOTE: Enrolling an existing device in DO mode will erase the device completely and factory reset the device.

Clicking on Android Enterprise will launch the profile creation wizard. The first screen of the create profile wizard is divided into two sections,
1. BASIC INFO: This section allows you to provide the following details,
  1. Profile Name: Give this profile a name to identify it.
  2. Description: Provide a description for this profile.
2. MDM INFORMATION: This section allows you to provide the download information related to Scalefusion MDM Agent,
  1. Select Force Device Owner Enrollment
  2. Pick your MDM: From the dropdown please select Scalefusion by Promobitech
  3. Copying the URL from Scalefusion Dashboard: At this point, navigate to Scalefusion Dashboard, select I want to Create a Device Owner Profile & Copy the MDM Agent URL
  4. Pasting the URL in KME Console: Paste the copied URL in the Profile creation wizard as shown below. Once you paste the URL and click outside of the URL field, the link to the APK will be verified. Once it is verified, the CONTINUE will be enabled.
    It is recommended to copy and paste the URL from Scalefusion Dashboard
  5. Click CONTINUE to go to the next section
The second section lets you provide the enrollment information & device settings. This section is further divided into the following sub-sections,
1. MDM Configuration: This section lets you define the enrollment information that will be passed to the Scalefusion app, once it is installed over the air. In order to provide this,
  1. Copy Configuration from Scalefusion Dashboard: At this point navigate to Scalefusion Dashboard and copy the configuration data as shown below.
  2. Paste the data in KME Console: Click on the Custom JSON Data text field and paste the data that you just copied.
  DONOT Modify the configuration data. Modifying/Editing the configuration will cause the Scalefusion app to NOT ENROLL properly.
2. Device Setting: This section lets you define the enrollment experience and provides the following sections,
  1. System Apps: Choose the default state of the system apps.
    1. Disable System Apps: This will setup the device without enabling the default system apps that the device ships with.
    2. Leave all System Apps enabled: This will setup the device but leave the default apps intact. We recommend using this approach as some of the functionality may depend on default apps or your IT may require usage of default apps.
  2. Legal Agreement & Company Name: If you plan to provide an unboxed device to your employees directly then we suggest to provide a legal agreement so that they are aware that this device will be managed and know the legal agreement.
  3. Review the changes and click CREATE to create the profile.
Once the profile is created it will be listed in the profiles as shown below.

Device Admin Profile

Clicking on Device Admin will launch the profile creation wizard. The first screen of the create profile wizard is divided into two sections,
1. BASIC INFO: This section allows you to provide the following details,
  1. Profile Name: Give this profile a name to identify it.
  2. Description: Provide a description for this profile.
2. MDM INFO: This section allows you to provide an MDM URI. Scalefusion does not require this option so please select Server URI not required for my MDM & click CONTINUE
The second section lets you provide the enrollment information & device settings. This section is further divided into the following sub-sections,
1. MDM Configuration: This section lets you define the download location of the Scalefusion APK and the enrollment information that will be passed to the app, once it is installed over the air. Please follow the steps below,
  1. Copy the APK URL (Scalefusion Dashboard): From the Scalefusion Dashboard copy the APK URL.
  2. ADD MDM APP (KME Portal): Click on ADD MDM APP, paste the URL that you copied and click SAVE
  3. Copy Configuration (Scalefusion Dashboard): At this point navigate to Scalefusion Dashboard and copy the configuration data as shown below.
    1. Paste the data in KME Console: Click on the Custom JSON Data text field and paste the data that you just copied.
    DONOT Modify the configuration data. Modifying/Editing the configuration will cause the Scalefusion app to NOT ENROLL properly.
2. Device Settings: This section lets you control the enrollment experience. The options are,
  1. Enrollment Settings: Choose the Out of the Box experience,
    1. Skip Setup Wizard: Enabling this will skip the setup wizard during first time device setup.
    2. Allow end users to cancel enrollment: Enabling this will allow the users to cancel the enrollment.
  2. Legal Agreement & Support Info: If you plan to provide an unboxed device to your employees directly then we suggest to provide a legal agreement so that they are aware that this device will be managed and know the legal agreement.
3. Review the changes and click SAVE
Once the profile is created it will be listed in the profiles as shown below.

Now that the profile has been created we are ready to enroll the devices. Please refer to our guide on Enrolling Samsung KME Devices.

How did we do?

(opens in a new tab)