Menu

Client Integration with Knox Mobile Enrollment

Android Enterprise support

Knox Mobile Enrollment (KME) enables you to enroll corporate-owned devices to an MDM using Android Enterprise provisioning method. This topic provides you with detailed instructions on how to integrate KME and Android Enterprise.

NOTE—To get support on integration with KME, sign up for the Knox Partner Program. For more information about becoming Knox Validated, see Knox Validated Program for EMM solutions.

Minimum requirements

To support Android Enterprise provisioning in KME, you must:

  1. Support Android Enterprise provisioning.
  2. Host an MDM agent APK download link on Managed Google Play or your own web server.

Integrate with KME

Once you integrate with KME and get verified by Samsung, customers can use the KME portal to select your MDM in the Android Enterprise profile dialog.

It’s important to note that customers can provision usernames and passwords in the KME portal. If you plan to support server and user credential provisioning, you need to support the naming conventions that KME uses, as shown in the following table.

NOTE—If you already have your own keys aligned with KME, you can use them.
KME Key Description
username Username or ID
password Password
kmeUri MDM Server URI

You can also use the KME portal’s Custom JSON Data field to configure the MDM setup and set additional data, such as enrollment_id, as shown in the following image.

Custom JSON Data (as defined by MDM)

KME combines all credential provisioning and configuration data in the JSON format and sends it to the MDM agent as android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE. The following example shows one such bundle.

{	
  "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": 
      {			 
          "username":"user@mycompany.com",
          "password":"mypassword",		
          "enrollment_id":"1234566",
          "kmeUri":"example.example.com",
      }	  
}

Verify integration

You can verify your integration in the KME portal with a test account as follows.

  1. Log in to the KME portal with a valid test account.
  2. In the left hand navigation menu, select MDM Profiles.
  3. Click Create Profile, and then select Android Enterprise. The Android Enterprise profile dialog opens.
  4. Enter appropriate information in the Profile Name and Description fields.
  5. In the Pick your MDM list, choose Other.

Pick your MDM dialog and drop-down list

  1. When prompted, enter the following information:
    • MDM Agent APK, that is, your agent’s APK link
    • MDM Server URI (which will be included in extra bundle with ‘kmeUri’ as explained above and delivered to MDM app)

Sample Profile Settings dialog - MDM Agent APK

  1. Click Continue. This profile is now ready for use (testing). For follow-up steps for testing and other information, see the KME guide.
Share it: