Android Enterprise device owner

This topic provides information on Android Enterprise device owner support for KME. A device owner (DO) is a privilege assigned to an MDM or similar application to apply policies and restrictions to a device during setup. Using Knox Mobile Enrollment, IT admins and end users can create an MDM profile and define themselves as a DO (Fully Managed Device) on devices running Knox 2.8 or later.

Supported MDMs

Android Enterprise device owner mode (Fully Managed Device) support is currently limited to Workspace ONE UEM, Blackberry, MobileIron, IBM MaaS360, SOTI, Citrix, ManageEngine, BlackBerry, Sophos Mobile, Microsoft Intune, DuoSTATION, Snow Software, Knox Manage, Samsung SDS EMM, FAMOC, 42Gears, Chimpa, Proget, Miradore, Matrix42, Corotado, and TinyMDM. Samsung anticipates additional MDM partners will follow suit in short order. For more information, contact your MDM directly.

For information about the DO enrollment methods utilized by KME supported MDMs, go to: MDM enrollment methods.

To reference Samsung's partner support documentation directly from their support sites, refer to the following:

• Workspace ONE UEM - https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/9.7/vmware-airwatch-guides-97/GUID-AW97-KnoxBulk_AFW.html
• Blackberry - https://docs.blackberry.com/en/endpoint-management/blackberry-uem/12_10/administration/activating_devices/qix1464638756686
• Citrix - https://docs.citrix.com/en-us/xenmobile-apps/10/secure-hub/samsung-knox-bulk-enrollment.html
• FAMOC -https://support.fancyfon.com/en/support/solutions/articles/23000017770-samsung-kme-enrollment
• IBM MaaS360 - https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/W0dcb4f3d0760_48cd_9026_a90843b9da06/page/KNOX%20Enrollment%20Program
• Knox Manage - https://support.samsungknox.com/hc/en-us/articles/360001257167-How-do-I-integrate-Knox-Manage-with-Knox-Mobile-Enrollment-
• ManageEngine - https://www.manageengine.com/mobile-device-management/help/enrollment/enrolling_knox_devices.html#Enrollment_Process_in_mobile_device_for_Android_devices
• Microsoft Intune - https://docs.microsoft.com/en-us/intune/android-samsung-knox-mobile-enroll
• MobileIron - http://mi.extendedhelp.mobileiron.com/40/all/en/desktop/Samsung_Knox_enrollment.htm?rhsearch=knox%20mobile%20enrollment&rhsyns=%20
• Proget - https://docs.proget.pl/en/android/android/#device-onwer-profile
• SOTI - https://www.soti.net/mc/help/v14.1/en/console/devices/managing/enrolling/platforms/knox/knox_mobile_enrollment.html
• 42Gears - https://www.42gears.com/blog/mass-enrollment-suremdm-using-knox-mobile-enrollment/

If Workspace ONE UEM is selected as the Supported MDM, refer to the Custom JSON Data (as defined by MDM) field and enter custom configuration data that is recognizable to the MDM. An acceptable format is as follows:

{
 "gid": <group id of Workspace ONE UEM tenant>
}