Enroll devices with Apple User Enrollment

Users can enroll their personal iPhones and iPads in Sophos Central Self Service Portal. As an administrator, you can also enroll the devices in Sophos Mobile Admin.

Account-driven Apple User Enrollment

With account-driven Apple User Enrollment, a user enrolls their device as follows:

1. Give the Managed Apple ID and password to the user.
2. On the device they want to enroll, the user must open the Settings app, go to General > VPN & Device Management, and tap Sign in to Work or School Account.
3. The user enters their Managed Apple ID.
4. The device redirects the user to a Sophos Mobile page where they must sign in with their Sophos Central Self Service Portal credentials.
5. The user selects an enrollment configuration from the list of configurations you added for account-driven Apple User Enrollment.
6. If you’ve configured Terms of Use and a post-enrollment text, the user must acknowledge these.
7. When the user taps Download profile, the Sophos Central Self Service Portal redirects the user back to their Settings app.
8. The user must enter their Managed Apple ID password.
9. When the user taps Allow Remote Management and enters their device password, the Settings app downloads and installs the Sophos Mobile enrollment profile.

When the enrollment was successful, a Sophos Mobile entry shows on the device in Settings > General > Device Management.

Profile-based Apple User Enrollment

With profile-based Apple User Enrollment, a user enrolls their device as follows:

1. Give the Managed Apple ID and password to the user.

2. The user must sign in to Sophos Central Self Service Portal, go to Mobile, and select Enroll Device.

   They can sign in using the device they want to enroll or use another device to sign in.

3. Sophos Central Self Service Portal directs the user to a Sophos Mobile enrollment web form. When the user confirms the web form, the device downloads a configuration profile from Sophos Mobile.

4. The user must open the Settings app and tap Enrol in.

   

5. On the next page, the user can read information about User Enrollment. To enroll, the user must tap Enrol My iPhone or Enrol My iPad. The enrollment process then starts.

   

When the enrollment was successful, a Sophos Mobile entry shows on the device in Settings > General > Device Management.

Profile-based Apple User Enrollment for administrators

Typically, users perform Apple User Enrollment by themselves. As an administrator, you can also perform profile-based Apple User Enrollment from Sophos Mobile, but you can’t perform account-driven Apple User Enrollment from Sophos Mobile.

To perform profile-based Apple User Enrollment as an administrator, do as follows:

1. In Sophos Mobile, go to Devices and click Add > Add device wizard.
2. Select Search for user and search for the user that you want to assign to the device.
3. Select the user.

4. On the Device details page, select the iOS & iPadOS platform. Enter other details as required.

   

5. On the Enrollment type page, do one of the following:

   • To enroll the device: Select Apple User Enrollment and enter the Managed Apple ID.
   • To enroll the device and perform additional tasks: Select Apple User Enrollment with task bundle, select the task bundle, and enter the Managed Apple ID.

   

6. On the Enrollment page, scan the QR code with the Camera app of the device you want to enroll. The device opens a Sophos Mobile enrollment web form.

7. Confirm the web form.
8. Complete the enrollment process on the device, as described in Profile-based Apple User Enrollment from step 4 onwards.