Android Enterprise device owner

This topic provides information on Android Enterprise device owner support for KME. A device owner (DO) is a privilege assigned to an MDM or similar application to apply policies and restrictions to a device during setup. Using Knox Mobile Enrollment, IT admins and end users can create an MDM profile and define themselves as a DO (Fully Managed Device) on devices running Knox 2.8 or later.

Supported MDMs

Android Enterprise device owner mode (Fully Managed Device) support is currently limited to AirWatch, Blackberry, MobileIron, IBM MaaS360, SOTI, Citrix, ManageEngine, BlackBerry, Sophos Mobile, Microsoft Intune, DuoSTATION, Snow Software, Knox Manage, Samsung SDS EMM, FAMOC, and 42Gears. Samsung anticipates additional MDM partners will follow suit in short order. For more information, contact your MDM directly.

To reference Samsung's partner support documentation directly from their support sites, refer to the following:

• AirWatch - https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/9.7/vmware-airwatch-guides-97/GUID-AW97-KnoxBulk_AFW.html
• Blackberry - https://docs.blackberry.com/en/endpoint-management/blackberry-uem/12_10/administration/activating_devices/qix1464638756686
• Citrix - https://docs.citrix.com/en-us/xenmobile-apps/10/secure-hub/samsung-knox-bulk-enrollment.html
• FAMOC -https://support.fancyfon.com/en/support/solutions/articles/23000017770-samsung-kme-enrollment
• IBM MaaS360 - https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/W0dcb4f3d0760_48cd_9026_a90843b9da06/page/KNOX%20Enrollment%20Program
• Knox Manage - https://support.samsungknox.com/hc/en-us/articles/360001257167-How-do-I-integrate-Knox-Manage-with-Knox-Mobile-Enrollment-
• ManageEngine - https://www.manageengine.com/mobile-device-management/help/enrollment/enrolling_knox_devices.html#Enrollment_Process_in_mobile_device_for_Android_devices
• Microsoft Intune - https://docs.microsoft.com/en-us/intune/android-samsung-knox-mobile-enroll
• MobileIron - http://mi.extendedhelp.mobileiron.com/40/all/en/desktop/Samsung_Knox_enrollment.htm?rhsearch=knox%20mobile%20enrollment&rhsyns=%20
• SOTI - https://www.soti.net/mc/help/v14.1/en/console/devices/managing/enrolling/platforms/knox/knox_mobile_enrollment.html
• 42Gears - https://www.42gears.com/blog/mass-enrollment-suremdm-using-knox-mobile-enrollment/

If AirWatch is selected as the Supported MDM, refer to the Custom JSON Data (as defined by MDM) field and enter custom configuration data that is recognizable to the MDM. An acceptable format is as follows:

{
 "gid": <group id of Airwatch tenant>
}