Citrix Endpoint Management: Deploy Work Profile on a Company Owned Device Configuration

In order to enroll Work Profile on a Company Owned Device, you should create an enrollment profile.

Within Endpoint Management navigate to: Configure, Enrollment Profiles, select Add
Enter a Enrollment profile name of your choice, select Next
For Management, select Android Enterprise
For Device owner mode, select None - BYOD work profile will automatically turn on
Select Next
For iOS, Application management and User consent are optional, select Next
For Windows, Device Management, User consent and Workspace integration are optional, select Next
Select a Delivery Group and select Save

At the time of writing, custom JSON code needs to be included in a QR Code or a KME Profile in order to enroll into WPC successfully.

To generate such a QR code, follow these steps:

In Endpoint Management, go to Settings cog
Select Android
Select Android Enterprise QR Code
Enter your server details, eg. domain.xm.cloud.com
Enter your username and password to be used on the device
Select Generate QR Code

NOTE

To enroll devices in the work profile on corporate-owned devices mode, add "desiredProvisioningMode": "managedProfile“, to the custom JSON under PROVISIONING_ADMIN_EXTRAS_BUNDLE. Select Generate QR Code (again), resulting in:

To enroll your device as an Android Enterprise Work Profile on a Company Owned Device, you need to ensure the device is factory reset and at the welcome screen. From here, there are 2 ways you can enroll your device into Citrix Endpoint Management as an Android Enterprise Work Profile on a Company Owned Device.

1. QR Code Enrollment / NFC Enrollment

2. Knox Mobile Enrollment

Below is a screen-by-screen play to enroll your device using the QR Code method.