Managed Google domain device enrollment

You can turn on managed Google domain device enrollment for all new enrollments.

For information on upgrading already enrolled devices to managed Google domain, see Upgrade a device to managed Google domain enrollment.

Overview

With managed Google domain device enrollment, users authenticate with Google instead of Sophos Fusion. All users must have an account in your managed Google domain.

If you registered your organization with Android Enterprise in managed Google domain mode before April 9, 2024, the following enrollment methods become available when you turn on managed Google domain device enrollment:

• Zero-touch enrollment
• Knox Mobile Enrollment
• QR code enrollment

These enrollment methods were already available for other types of Android Enterprise registrations.

Requirement

Before you turn on managed Google domain enrollment for new enrollments, you must add all your users to your managed Google domain.

You can add users in one of the following ways:

• Add managed Google accounts to your Google Workspace or Cloud Identity account. For Google Workspace, see Options for adding users. For Cloud Identity, see Create Cloud Identity user accounts.
• Configure an external identity provider (IdP) in your Google Workspace or Cloud Identity account. See Use an external IdP.

For more information about Google identity management, see Overview of Google identity management and Best practices for planning accounts and organizations.

Restriction

With managed Google domain device enrollment, Samsung Knox Mobile Enrollment (KME) doesn't support the legacy device administrator management mode.

Turn on managed Google domain device enrollment

To turn on managed Google domain enrollment for new enrollments, do as follows:

1. In Sophos Fusion, go to My Products > Mobile.
2. Go to Setup > Google setup and open the Android Enterprise tab.
3. Under Managed Google domain device enrollment, select Use managed Google domain device enrollment.
4. Click Save.

If you don't see Use managed Google domain device enrollment, you must first upgrade your Android Enterprise registration mode to managed Google domain. See Upgrade to managed Google domain.