To enable mobile device management in Casper for your site, contact the Endpoint Management team for a one-time setup.
There are three ways to enroll iOS devices with the JSS: prestage enrollment (recommended), enrollment invitations, and user-initiated enrollment. Some functionality requires the device to be Supervised, which can only be accomplished via prestage enrollment.
Prestage enrollment involves registering a device with Apple to use our JSS. As soon as the user turns on the iPad, the iOS setup assistant will check in with Apple, and automatically enroll in our JSS with the settings and site we've defined. The user will not be able to skip this or remove the enrollment, even if they wipe the device. This is the best way to ensure that your devices are always managed and enrolled in the JSS. This also allows additional functionality such as the ability to push iOS upgrades, lock down portions of the device, and others. Functionality requiring supervision is listed in the JSS on a per function basis.
- To enroll new devices email the serial numbers along with the desired site to the Endpoint Management team.
You can explicitly invite a user to enroll in the JSS by sending them a special link through email or SMS. In the JSS:
- Click on the Mobile Devices tab
- Click on Enrollment Invitations in the sidebar.
- Click New
- Choose email (recommended) or SMS, then click Next.
- Enter the email addresses / cell phone numbers of the users you'd like to invite, then click Next.
- Customize the message if you like, then click Next.
- Set an expiration date for the invitation. You can set it as far as 2030.
- Leave the require login box checked. This ensures that the device will be properly associated with the user's LDAP account.
- If you'd like to re-use this same invitation link for many users in the future, check the Allow multiple uses box.
- Click Next to send the invitation.
When the user clicks that link, they'll be sent to a JSS portal where they can enter their MIT Kerberos account and password to complete enrollment of the device.
Please note that if a device is already enrolled, you might need to delete it from the JSS before this can succeed.
All users can go to the Casper Enrollment portal and log in with their MIT Kerberos account username and password to enroll their MIT-owned iOS device. This will not put the device into the appropriate site, however; you will need to contact the Endpoint Management team with the serial number of the device and the site it should be moved into after enrollment. For this reason, user-initiated enrollment is not recommended. Use prestage enrollment or enrollment invitations to enroll directly into the desired site.
Questions? Contact us at Endpoint Management.