Back to top

How do I integrate Knox Manage with Knox Mobile Enrollment?

Last updated April 16th, 2024

Categories:

Go to the Knox Mobile Enrollment admin guide for detailed information on how to integrate this service with Knox Manage.

You will need to enter the following data during the setup process:

EMM Server URI

Region URI
Asia https://ap01.manage.samsungknox.com/emm
US https://us01.manage.samsungknox.com/emm
EU https://eu01.manage.samsungknox.com/emm

Depending on the tenant, you may have to change the domain URI. Refer to your prefix server address on the Knox Manage console, and enter that value in the EMM Server URI field. For example, if your server address is https://ap02.manage.samsungknox.com/emm/admin/login.do, your EMM Server URI should be https://ap02.manage.samsungknox.com/emm.

The EMM Server URI field is optional.

EMM Agent APK

When selecting Samsung Knox Manage as your EMM, a default URI is automatically populated in the EMM Agent APK field. If you’re unable to download the APK, you can manually add a URI depending on the region:

Region APK
Asia http://install-ap.manage.samsungknox.com/KnoxManageEMMService.apk
US http://install-us.manage.samsungknox.com/KnoxManageEMMService.apk
EU http://install-eu.manage.samsungknox.com/KnoxManageEMMService.apk

For the Android Management API platform, manually add the following URI:

https://play.google.com/managed/downloadManagingApp?identifier=setup

JSON payload for enrollment

The following key-value pairs can be added to the JSON payload:

Enrollment type Key Type Value
Android Enterprise tenantId String Enter the name of your Knox Manage enterprise domain. It occurs after **@** in your Knox Manage user name.
tenantType String M
AllowModifyUserId String Allow or Disallow
Mode String DO or PO
AMAPI com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN String Enter your enrollment token. The token is an eight-character alphabetical string, and can be found on your enrollment invitation email.

For a basic configuration, your JSON data entry may look like this:

{  
    "tenantId": "knoxteam.samsung.com",  
    "tenantType": "M"  
}

To configure additional parameters to automatically enroll the device in a particular mode, your JSON data entry may look like this:

{
    "tenantId": "knoxteam.samsung.com",
    "AllowModifyUserId": "Disallow",
    "Mode": "DO"
}

For AMAPI enrollment, your JSON data entry may look like this:

{
    "com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN":"ABCDEFGH"
}

Is this page helpful?