Windows Azure Enrollment

Step #1: Provisioning third-party certificates

If you have already added a third-party certificate to MDM, go to Step #2. You require a trusted third-party certificate to be added to MDM, to configure Windows Azure Enrollment. You can refer this for more details regarding provisioning of third-party certificates.

Step #2: Purchase adequate Azure user licenses

If you already purchased licenses you can assign it to user/groups as explained here. If you have also assigned users, you can go to Step #3. You then need to purchase adequate licenses based on the number of users, permitted to enroll devices using Azure. To purchase licenses, follow the steps given below:

• Login to Azure portal with your Azure account credentials or navigate to Azure Active Directory -> Licenses -> All Products -> Try/Buy.





• Select Azure AD Premium P2 and click on Free Trial. Click on Activate, on which you are taken to the pricing page, where you can proceed with purchasing the licenses.





• Once purchased, go back to All Products, select Azure Active Directory Premium P2 and click on Assign.



• Now click on Users and Groups, select the requisite groups/devices and click on Select.



• Now select Assign, to complete assigning the licenses.

Step #3: Configure App Template

• Go to Azure Portal and login, if need be or navigate to Azure Active Directory -> Mobility (MDM and MAM) -> Add Application. Select On-Premises MDM (in case of MDM On-Premises) or ManageEngine MDM (in case of MDM Cloud) and then click on Add.



In case of MDM On-Premises:



In case of MDM Cloud:



• Now, click on Mobility (MDM and MAM) and click on the application added in the previous step.

In case of MDM On-Premises:



In case of MDM Cloud:



• Refer the table given below and specify the parameters applicable for MDM On-Premises or MDM Cloud respectively as shown.

In case of MDM On-Premises:







In case of MDM Cloud:






PARAMETER	DESCRIPTION
MDM user scope	The AD groups to which you want to permit enrollment via Azure. You can choose provision to all your AD groups or specific AD groups.
MDM terms of use URL	On the MDM Server, Navigate to Enrollment -> Windows Azure Enrollment and use the URL provided for MDM terms of use URL.
MDM discovery URL	On the MDM Server, Navigate to Enrollment -> Windows Azure Enrollment and use the URL provided for MDM discovery URL.
App ID URI	On the MDM Server, Navigate to and use the URI provided for App ID URI.



• Once done, go to Settings on the machine which is to be enrolled and then click on Access Work or School. Click on Connect and provide your Azure account to complete enrollment.

Sample CSV

1. The fields Serial Number, User Name, Email Address, and Group Name are mandatory. All the other fields are optional. Ensure the specified group name is already created in the MDM server. If values are not provided, default values are taken.
2. The default values for various non-mandatory fields are: 
   Domain Name -- MDM
   Owned By -- Corporate
   
3. If multiple groups are specified, the group names must be separated with a slash (/).
4. The first line of the CSV is the column header and the columns can be in any order.
   
5. Blank column values should be comma separated.
   
6. If the column value contains comma, it should be specified within quotes.