Skip to main content

​
Platform compatibility

​
Prerequisites

  • Employees must have accounts in Primo.
  • For iPhones and iPads: turn on Require authentication to enroll in MDM > Settings, or the devices enroll without an owner. See Enroll iPhones and iPads.

​
Invite your employees

​
1. Share your company enrollment portal

Every organization has a dedicated enrollment portal. Share it with employees via Slack, email, or any other channel:

​
2. Invite by email

Go to Employees and use the Invite to MDM action:
  • One employee — open the employee profile and click Invite to MDM.
  • A selection — select employees, click Invite to MDM > Invite X selected employees.
  • Everyone — click Invite to MDM > Invite matching employees.
Each invited employee receives an MDM invitation, then a reminder to enroll every 7 days until you deactivate the invites or they enroll a device.

​
Enroll iPhones and iPads

iPhones and iPads enroll through a link to your enrollment page, like Android devices. The employee scans the QR code or opens the link on the device, downloads the profile Primo serves, and installs it from Settings. The link is the same for every employee: it does not tell Primo who is enrolling. Primo learns it from the sign-in required before the profile is served, which only happens when Require authentication to enroll is on.

​
Turn on IdP authentication

1

Open MDM settings

Go to MDM > Settings.
2

Require authentication to enroll

In the Enrollment section, turn on Require authentication to enroll. The change saves automatically.
Primo is the identity provider for this sign-in: employees sign in to Primo with their work account, and you don’t have to configure an app in SaaS. If your company requires two-factor authentication, employees who have not set it up are asked to during the sign-in.
The same setting adds the sign-in to the Zero-Touch Deployment setup flow on Apple devices. See Require authentication to enroll.