In-app registration for iOS and Android

You can ask Android device users to download Mobile@Work from Google Play and register by themselves.

Procedure

  1. Make sure that the device user has a user record (local or LDAP) available in Core. See “Managing Users” in Getting Started with MobileIron Core.
  2. Instruct the device user on downloading the app and registering. The device user will need the following information:
    • user name
    • password and/or Registration PIN
    • server (and the port number, if you did not use the default port number for TLS)

See Registration methods for points to consider before using this registration method.

What the device user sees

NOTE: For iOS 12.2 through the most recently released version as supported by MobileIron, when doing the iReg and in-app registration of the MDM profile, the device user experiences a different registration process.

After downloading and installing Mobile@Work, the device user must register with MobileIron Core by entering their user name, password, and server details.

NOTE: In iOS 13, the option to "Allow Always" was removed from the iOS Settings app. Instead, a dialog box displays requesting device users to enable tracking when the Mobile@Work app is running. Mobile@Work opens iOS Settings where device users can choose "Ask Next Time" or "Never". MobileIron recommends device users to enable tracking. This change applies to all versions of iOS 13 through the latest version as supported by MobileIron. Mobile@Work for iOS does not track device users' location without consent.

If a customized terms of service agreement has been defined on MobileIron Core, device users will need to accept the agreement before registering with Core.

Auto-populating the MobileIron Core server name during registration

Auto-populating the MobileIron Core server name streamlines the registration process and eliminates the need for the device user to type it. You can auto-populate the Core server address based on the device phone number or the email address.

NOTE: This feature is not supported for devices with Android v6.0 and above.

Auto-populating the MobileIron Core server name based on email address

To auto-populate the server name based on the device user’s email address, you only need to register your MobileIron Core with MobileIron. Additional configuration on Core is not required.

Device users must enter their full email address when prompted to enter their user name in the registration screen. MobileIron matches the email domain to the appropriate MobileIron Core and populates the registration screen with the correct server name.

Registering your MobileIron Core with MobileIron

To register your MobileIron Core, open a ticket on the MobileIron Support portal and provide the following information:

  • your company name (e.g. MobileIron)
  • your email domain (e.g. mobileiron.com)
  • your MobileIron Core hostname for on-premise Core, or m.mobileiron.net:<appropriate port number> for Connected Cloud.

Auto-populating the MobileIron Core server name based on the phone number

You can also auto-populate the MobileIron Core server name based on the device’s phone number. The following setup is required:

  • Core access to the MobileIron Gateway. Configure the required ports. See the “Changing Firewall Rules” section in the Installation Guide for details.
  • Enable server name look up in the Admin Portal on the Settings > System Settings > Users & Devices > Device Registration page.

To enable server name lookup:

  1. In the Admin Portal, go to Settings > System Settings > Users & Devices > Device Registration.
  2. Select Enable Server Name Lookup.
  3. Click Save.

Note The Following:

  • Because this feature relies on a mobile number, it does not apply to iOS devices.
  • The mobile number must also be present on the SIM in order for the Enable Server Name Lookup option to work.
  • Registering MobileIron Core with MobileIron is not required.

Registering an Android device with Mobile@Work

This registration method applies to registering Android devices using the following methods:

Procedure

After the Mobile@Work app is installed on your device, complete registration as a corporate device user.

  1. Tap the Mobile@Work app icon. The “Get Ready for Work with Mobile@Work” page opens.
  2. Enter your company’s URL. You can also use the Scan QR code and Register with Email option.
  3. Tap Next.
  4. The Username page displays. Enter it and tap Sign In. 
  5. The Password field displays. Enter it and tap Sign In.
  6. After your credentials are verified, the Home page opens.
  7. Mobile@Work checks for updates.
  8. Once registration is complete, the Privacy statement displays for the device user to read.
  9. Mobile@Work guides the device user through the rest of the provisioning. The type of provisioning depends upon the policies and configurations set by the administrator.

Requiring device identifiers for enrollment

You have the option to make the collection of a device’s hardware identifiers such as the IMEI number and the phone number optional before the device is enrolled. If you disable Require device identifiers for enrollment, the enrollment will still proceed, but the client will not collect the device identifier data. The device would be a "PDA" device such as a tablet.

Procedure

  1. In Admin Portal, go to Settings > System Settings > Users & Devices > Registration.
  2. Select Require device identifiers for enrollment.
    This is supported on devices using Android 6.0 through the most recently released version as supported by MobileIron.
  3. Click Save.
NOTE: Phone number lookup is supported on devices in Device Owner mode and using Android prior to Android 6.0.