Knowledge Base ​ > ​ ​Android Device Management ​ > ​ ​Corporate Device Management ​ > ​ ​Scalefusion Enrollment Methods ​ > ​   Enrolling Corporate-Owned Android Devices

Enrolling Corporate-Owned Android Devices

Updated 11 months ago by Sriram Kakarala

The first step to manage your corporate owned Android device, is to enroll it in Scalefusion dashboard. Scalefusion offers quite a few mechanisms to enroll your corporate owned devices. Here is a list of options, the prerequisites and the description on when to use them,

Enrollment Method

Pre-Requisites

Description

Sign In

1. Owner/Admin sign-in credentials.

Use this method, when you or the IT admin is setting up the devices

QR Code

1. Create a QR Code using Device Enrollment > QR Code option on Dashboard.

2. A Camera enabled Phone/Tablet.

Use this for faster enrollment of devices and/or when you don’t want to share the credentials.

Auto-Login

1. IMEI of the device is pre-enrolled using Device Enrollment > IMEI enrollment option on Dashboard.

2. Configuration file downloaded after creating a QR Code configuration.

Use this option for bulk-enrollment of devices,

a.  When you have the list of IMEI numbers.

b. When you are using a custom ROM and preload the Scalefusion apk and configuration file.

License Key

1. Need a License key.

Use this option if you want to enroll via the license key.

afw#mobilock

1. Google-compliant Android 6.0 and above device.

The Android for work (afw#) method is used to give Scalefusion extra privileges to better manage corporate devices. Once the Scalefusion app is downloaded, you would need one of the options listed through 1-4 above.

Zero-Touch

1. Zero Touch Portal Account

2. Zero Touch Device

3. Scalefusion Account

Zero-touch enrollment is a streamlined process for Android (non-Samsung)  devices to be provisioned for enterprise management. On first boot, devices check to see if they’ve been assigned an enterprise configuration. If so, the device initiates the fully managed device provisioning method and downloads Scalefusion and completed enrolling the managed device.

Samsung Knox Mobile Enrollment

1. Samsung KME Account

2. Samsung KME Supported devices with Knox 3.8 & above

3. Scalefusion Account

Samsung KME is a streamlined process for Samsung devices to be provisioned for enterprise management.

Devices already purchased can be enrolled using Knox Deployment App.

Devices purchased from a Reseller will be provisioned on first boot.

Six-tap setup

1. Device is factory-reset

2. Entering GMail account during device setup, need not be done.

3. Create a QR Code configuration

4. Device must be running Android 6.0 and higher

Six-tap setup offers a quick and easy way to enroll devices right when they are unboxed or after a factory reset, in the form of six-taps and scanning a QR Code. This method of enrollment, downloads the Scalefusion application, sets the app as Device Owner (EMM managed) and performs the Sign-In automatically leaving only the permissions step to be completed.

In this guide we will see how to enroll an android device using the following methods:

  • Sign In credentials
  • QR code
  • afw#mobilock
  • ZeroTouch
  • Samsung Knox Mobile
  • Six-tap setup

Enroll using Sign In Credentials

Before you Begin

  1. Valid Sign In credentials that are used to sign-in to Dashboard.
  2. An Android device running 4.0 and higher.

Visual Guide

Please watch the video below for a quick visual walkthrough.

Steps

  1. Install Scalefusion client from Google Play Store or install the Scalefusion apk directly.
  2. Launch Scalefusion client.
  3. Click on Enroll.
  4. From the options menu, select Sign In.
  5. Enter your Email ID and Password in the respective text input fields.
  6. Click Sign In.
  7. You may see Data Collection Information screen. Click Agree
  8. You will be asked to give Scalefusion the permissions to make and manage Phone calls. Click on Allow.
  9. If the credentials are correct, then the device would sign-in and show you the Device Name screen. Enter a name for your device and click Submit.
  10. If you have created a Device Group or Device Profile on Scalefusion dashboard, then you can enter the group key or select the profile.
    If you don't want this device to be a part of any group or profile, you can select Skip.
  11. You would be shown the Permissions screen. The permissions are divided into 3 sections,
    1. Mandatory Permissions: Clicking on the toggle button next to each of the permission will take you to a system screen, where among other applications you would see Scalefusion. Enable Scalefusion for each permissions and hit the back key to come back to permission screen. Click Next once you have given all permissions and see green ticks next to each one.
    2. Runtime Permissions: These are the run-time permissions and are required for an optimal Kiosk/Agent experience.
    3. Set Scalefusion as Launcher: This option is shown if Scalefusion is set to run as Kiosk which is the default (and only) option as of today. Click on the Setup Scalefusion button and from the list of options select Scalefusion as the launcher and select Always.
      If you have a GSuite id, on permissions page there would a toggle button to Sign In Into GSuite with your GSuite account id. You need to enable this and follow further steps. Once completed, click the Complete Setup button. Please see details in the below section Enrollment with GSuite. In this case, the device should be made as Device Owner
  12. That should be it. If all steps are completed properly, then you should see the Scalefusion home screen with all the applications that you have allowed from Scalefusion Dashboard.

Enroll using QR Code

Before you Begin

  1. A QR Code created using Device Enrollment > QR Code option in Scalefusion dashboard as described here.
  2. An Android device running 4.0 and higher with camera.

Visual Guide

Please watch the video below for a quick visual walkthrough.

Steps

  1. Install Scalefusion client from Google Play Store or install the Scalefusion apk directly.
  2. Launch Scalefusion client.
  3. Click on Enroll
  4. From the options menu, select QR Code.
  5. Scan the QR Code by placing it between the markers shown on screen. If the QR Code is valid & scanned properly then the device would sign-in.
  6. Once the device signs in successfully you would see the Permissions screen. The permissions are divided into 3 sections,
    If you have a GSuite id, on permissions page there would a toggle button to Sign In Into GSuite with your GSuite account id. You need to enable this and follow further steps. Once completed, click the Complete Setup button. Please see details in the below section Enrollment with GSuite
    1. Mandatory Permissions: Clicking on the toggle button next to each of the permission will take you to a system screen, where among other applications you would see Scalefusion. Enable Scalefusion for each permissions and hit the back key to come back to permission screen. Click Next once you have given all permissions and see green ticks next to each one.
    2. Runtime Permissions: These are the run-time permissions and are required for an optimal Kiosk/Agent experience.
    3. Set Scalefusion as Launcher: This option is shown if Scalefusion is set to run as Kiosk which is the default (and only) option as of today. Click on the Setup Scalefusion button and from the list of options select Scalefusion as the launcher and select Always.
  7. That should be it. If all steps are completed properly, then you should see the Scalefusion home screen with all the applications that you have allowed from Scalefusion Dashboard.

Enroll using afw#mobilock

Before you Begin

  1. Enroll for Android for Work on Scalefusion dashboard as described here.
  2. A QR Code created using Device Enrollment > QR Code option in Scalefusion dashboard as described here.
  3. A completely new or factory reset, Android Enterprise Recommended device. For a full list of devices please check here.

Steps

  1. Switch on the device and select Language and Country.
  2. Power On the device.
  3. Select your language and configure a WiFi. A WiFi connection is needed to download Scalefusion client.
  4. When you see the screen asking you to configure GMail account, enter afw#mobilock
  5. Wait for the Scalefusion client to be downloaded.
  6. Click Install when prompted.
  7. Once done you should see the Scalefusion landing screen, which shows a camera view. In this screen,
    1. You can scan a QR Code if you have created a QR Code Configuration. You can scan a QR Code that you have created on Scalefusion Dashboard.To create a QR Code configuration refer this document.
    2. If you would like to setup the device using a License Code or Sign-In credentials, then click on 3 dots menu option and navigate to the start page.
  8. On the Permissions Page, Set Scalefusion as Device Owner.
    If you have a GSuite id, on permissions page there would a toggle button to Sign In Into GSuite with your GSuite account id. You need to enable this and follow further steps. Once completed, click the Complete Setup button. Please see details in the below section Enrollment with GSuite
  9. Complete the Setup by choosing to Create an AfW account.
  10. Scalefusion performs silent setup in the background to make the device managed, which usually takes 10-15 minutes. You can check the state of the setup by clicking on 3 dots menu and selecting Diagnostics and the AfW Setup card will display the status. 

Enroll using Auto-Login

Please refer to our detailed help document on IMEI/Serial Number based Enrollment to prepare your devices for bulk enrollment with IMEI/Serial number.

Enroll using License Key

Please refer to our detailed help document on Enroll using License key

Enroll using ZeroTouch

Please refer to our detailed help document on Zero Touch Setup to prepare your devices for zero-touch enrollment.

Enroll using Samsung Knox Mobile Enrollment

Please refer to our detailed help document on Samsung Knox Mobile Enrollment to prepare and enroll your Samsung devices.

Enroll using Six-tap setup

Please refer to our detailed help document on Six-taps setup to prepare your Android owned corporate devices for enrollment using six taps setup method.

Enrollment with GSuite

Six times tap and afw#mobilock enrollment methods also allow you to enroll with GSuite id. To enroll with GSuite, make sure Android Enterprise Setup is done with GSuite.

While enrolling, on permissions page there would be a toggle button to Sign In Into GSuite. You need to enable this and follow further steps. After toggling on Sign In Into GSuite, follow these steps to complete enrollment:

  1. Enter your GSuite account id and tap Next
  2. Enter password. Tap Next
  3. This will bring up Google Services page. Tap Accept
  4. Choose an account to continue to Scalefusion. Here, select your GSuite account id.
  5. Once verified, you will get a green check mark next to Sign In into GSuite.
  6. Hit Complete Setup

Frequently Asked Questions

Question: Why does Scalefusion ask for permissions?

Answer: Scalefusion Android client requires these permissions to give you a fine-grain control on your corporate owned devices. If you would like to know why a certain permission is used please contact our support at [email protected] and we would be happy to elaborate.

Question: Nothing happens when I click on the toggle next to the permission name. What should I do?

Answer: On some devices the permission might not be exposed to third party applications although it is an Android OS standard. A Skip button would appear wherever Scalefusion application can detect that the permission is not accessible. Click on Skip to complete setup.

For Scalefusion application to work we would require the Usage Stats OR the Accessibility permission. You have to choose between either one of these permissions.

Question: When I try to enable Usage stats permission, i see a error dialog, asking to contact support. What should I do?

Answer: This happens when third party applications are not able to access this permission. You can choose to select Skip on this dialog and then select Accessibility permission. In case you are using Accessibility permission, make sure to test the basic functionality of Scalefusion before giving the device to your employees.

Question: On Samsung devices and on devices where I have used the afw#mobilock flow, I don't see the Runtime permissions screen. Is this expected?

Answer: This is expected. On these devices Scalefusion app can simplify the enrollment process due to enhanced privileges and hence it attempts to auto-grant the permissions to itself.

Question: Although I am setting up the device for the first time I see that some permissions are already enabled and have green tick?

Answer: This happens because Scalefusion app is not able to determine the state of that permission properly. To confirm that Scalefusion has indeed the permission, please navigate to System Settings and verify that Scalefusion indeed has the permission by searching for the relevant permission which has the green tick.

Question: I am trying to enroll a device running Android 4.4 and I don't see all the permissions as shown in video. Is this expected?

Answer: Yes. On Android version less than 6.0, most of the runtime permissions are auto-granted by the Android OS and hence these are not required to be given explicitly.

How did we do?

Powered by HelpDocs (opens in a new tab)