XenMobile FAQ: Shared Devices for iOS DEP

XenMobile FAQ: Shared Devices for iOS DEP

book

Article ID: CTX233615

calendar_today

Updated On:

Description

Q: Does XenMobile support shared devices for iOS when the devices are enrolled in Apple DEP?
A: Yes

Q: What is the difference between Basic DEP and Authorized DEP?
A: 
Basic DEP: During the setup assistant, the initial enroller is the default DEP user. Then, it is the final user after MAM registration with SecureHub app (iOS agent).
Authorized DEP: In this case, it is the final user who is directly the enroller during the setup assistant.


Q: Does that mean using the DEP for individually issued devices is a Basic DEP?
A: For Shared Devices feature, you have to differentiate the 2 types of server mode:

  • MDM-only: In this case, you could use the default DEP user as Shared enroller because there is no authentication with this special user.
  • ENT: In this case, you must use the final user because it is possible to sign in with the Shared enroller.
Note:
Don’t forget that the DEP user’s password is a random and cannot be changed after its creation.

Q: How will it decide that this is an Authorized DEP device or a Basic DEP?
A: There are 2 ways to know it:
  1. In the admin console: Go to Settings -> Apple Device Enrollment Program and edit the DEP account. If the "Require credentials for device enrollment" setting is set to ON, it is an authorized DEP. Otherwise, it is a basic DEP.
User-added image
          2. In the device setup assistant: If there is an authentication page, it is an authorized DEP. In the case of basic DEP, the MDM enrollment does not require the DEP user’s credentials. (Apple calls it "Automatic enrollment")
 

Additional Information

Shared devices - https://docs.citrix.com/en-us/xenmobile/server/provision-devices/shared-devices.html