Android Enterprise (Android for Work) setup using GSuite

If your organization uses GSuite and you would want to setup Android Enterprise using GSuite then please follow the document below.

Before You Begin

1. Sign In to Scalefusion Dashboard
2. You will need one GSuite account id with Administrator role.
3. Generate EMM token. To do so, click here

Steps to Register

1. Login to Scalefusion Dashboard and navigate to Getting Started > Android Enterprise Setup.
2. On this page, click REGISTER WITH GSUITE

   

3. You will get this page where you need to enter Domain name (Your business domain name) and EMM Token (as generated). It is mandatory to enter both.

   

4. After entering both, click REGISTER

   

5. You will get a confirmation page for the Android Enterprise Setup completed, with all the details like Activation Status, Date of Activation, domain, Enterprise name etc.

   

You can unenroll the Android Enterprise Setup anytime. The process to unenroll is described below in section Unenroll the Android Enterprise Setup.

Generate EMM token

EMM token is a unique token that binds your domain to Google for Android Management. Follow these steps to generate EMM token:

1. Visit admin.google.com and sign in with your GSuite admin credentials (username and password)
2. You will get Google's Admin Console page

1. Click on Devices

   

2. Navigate to Settings > Third Party Integrations

   

3. Here, under Third Party Integrations page, click in the Android EMM area

1. Now click on Add EMM provider

   

2. On the page that opens, token is visible. Click on COPY to copy this token.

   

3. Paste this token on Scalefusion Dashboard as shown above (Steps to Register >> #3)
4. Close the Manage EMM Provider window on Gsuite Admin Console. Under Third Party integrations, enable the option Enable Third Party Android Mobile Management and click on Save

   

5. A small window opens. Click SAVE ANYWAY

   

Unenroll the Android Enterprise Setup

1. Login to your Google Suite Admin account by visiting admin.google.com and sign in with your GSuite admin credentials (username and password).
2. Navigate to Menu > Devices > Mobile & Endpoints > Settings > Third-party integrations

   

3. Click on Edit icon in front of Android EMM

   

4. Click on Manage EMM Provider

   

5. Click Remove

   

6. You get a confirmation box. Click Remove

   

7. Now login to Scalefusion Dashboard and navigate to Getting Started > Android Enterprise Setup. Here, click on UnEnroll Enterprise.

   

8. A confirmation box will come up. Click Ok

   

9. You will be asked to enter your Scalefusion Dashboard login password to confirm. Enter the password and click SUBMIT
10. Now Refresh the page

You will again be shown with the default page to setup the Android Enterprise using Gmail or GSuite. This completes the unenrollment of the Android Enterprise Setup from your account.

Frequently Asked Questions

Question 1: I did GSuite based setup, we enrolled a device and provided GSuite ID. We are able to complete setup but the device still does not become EMM. What is the issue here?

Answer: If Google Device Policy Manager app is installed on the device:

Step 1: Please uninstall it

Step 2: Disable Google's Enable Mobile Management setting on Google Admin Console. To do so, follow these steps:

1. On Google Admin console, click on the three horizontal lines on the top left side and click on Devices

   

2. This opens Device Management page. On this page, click on Setup link on the left (under MOBILE)

   

3. On the Setup page, click on Mobile Management

   

4. Here, disable the setting Enable Mobile Management by toggling it off and click Save

   

Question 2: My organisation is using Gsuite MDM for all Devices by default. We want to use Scalefusion MDM on a set of users and want it to be the EMM provider, but don’t want to disturb our existing devices which are already managed by GSuite MDM. Can this be done?

Answer: Yes, you can enforce Scalefusion MDM on a selected set of Users. Since you’re already using G Suite MDM, it will be the default MDM for all your users. To use Scalefusion MDM on a set of users, you will need to create/use an existing Organisational Unit under your Parent Organisational Unit and add users/move existing users there. Follow these steps:

1. In the GSuite Admin Console, navigate to Directory > Organisational Units
2. Create a Child Organisational Unit under Parent Org

   

3. In Universal Settings (Devices > Mobile and endpoints > Universal Settings > General), following should be the setting for the Organisational Units:
   1. Parent Org: Mobile Management should be set to Advanced

      

   2. Child Org: Mobile Management should be set to Unmanaged (Scalefusion MDM is the third party EMM Provider)

      

4. From Directory > Users section, move the users to the child organisational unit. The child org is one on which Scalefusion MDM is enforced.

   

1. Now, in Parent Organisational Unit Scalefusion would not be enabled as your third party EMM provider.

   

2. Only for Child organisational unit Scalefusion will be the 3rd Path EMM provider. This ensures that Scalefusion becomes the MDM provider for users in your Child Organisational Unit only and will not impact other user(s).