Android Enterprise device owner

This topic provides information on Android Enterprise device owner support for KME. A device owner (DO) is a privilege assigned to an MDM or similar application to apply policies and restrictions to a device during setup. Using Knox Mobile Enrollment, IT admins and end users can create an MDM profile and define themselves as a DO (Fully Managed Device) on devices running Knox 2.8 or later.

Supported MDMs

Android Enterprise device owner mode (Fully Managed Device) support is currently limited to Workspace ONE UEM, Blackberry, MobileIron, IBM MaaS360, SOTI, Citrix, ManageEngine, BlackBerry, Sophos Mobile, Microsoft Intune, DuoSTATION, Snow Software, Knox Manage, Samsung SDS EMM, FAMOC, 42Gears, Chimpa, Proget, Miradore, Matrix42, Corotado, and TinyMDM. Samsung anticipates additional MDM partners will follow suit in short order. For more information, contact your MDM directly.

For information about the DO enrollment methods utilized by KME supported MDMs, go to: MDM enrollment methods.

To reference Samsung's partner support documentation directly from their support sites, refer to the following:

NOTE — Additional partner documentation and support site information will be added to this list as it becomes available.

If Workspace ONE UEM is selected as the Supported MDM, refer to the Custom JSON Data (as defined by MDM) field and enter custom configuration data that is recognizable to the MDM. An acceptable format is as follows:

"gid": <group id of Workspace ONE UEM tenant>

NOTE — For an Workspace ONE UEM DO, ensure gid is used, as opposed to Device Administrator (DA) mode where groupid is used. Otherwise, incorrect information could be entered.