Registering iOS and macOS devices through the web

Web-based registration is the process of registering iOS and macOS devices in bulk for large deployments. The benefits of this style of registration include:

iTunes accounts are not required
No end-user interaction is required

The MDM profile applied to macOS devices following registration is only applicable to the device user logged in to the device, not to the device itself. In effect, this means that devices running macOS and registered with Core do not allow multi-user support.

For registering macOS devices using Mobile@Work, see Registering macOS devices with Core using Mobile@Work for macOS.

Before you begin

Because users will be informed of the registration via email before they receive the device, consider turning off user notification when you bulk register devices. As an alternative, consider editing the registration template or informing users that they should ignore the email. See Customizing registration messages for information on editing the template.

Web-based registration requires a Safari browser on the device.

Procedure

In the Admin Portal, go to Settings > System Settings > Users & Devices > Device Registration.

Select the device registration settings that are relevant to your devices:

Item	Description
Enable Server Name Lookup	Select to enable server name lookup during registration.
Allow registration when password change is required	When a device user logs in for the first time, he/she will be asked to update the password for the next login. Selecting this field allows Core to authenticate the device user and completes enrollment. This is limited to device registrations only. Disabled by default.
Restrict device registrations by enrollment type	Select this option to restrict device registrations by enrollment type. Once checked, three additional checkboxes appear. Select all that apply: Apple devices that are part of the Automated Device Enrollment Program Android devices that are part of the Google Zero Touch Android devices that are part of Samsung Knox Mobile Enrollment
Display QR Code and Registration URL	Enabled by default. When enabled, your users have access to a registration URL and QR code in their registration invitation.
In-App Registration Requirement	Select an authentication option for devices registering with Core through Mobile@Work: •Password: Select to enable authentication through Mobile@Work using a password only. •Registration PIN: Select to enable authentication through Mobile@Work using only a PIN. •Password and Registration PIN: Select to enable authentication through Mobile@Work using both a password and a PIN. Note the following: • Registration PINs are valid for four hours. If a device user launches Mobile@Work for iOS within four hours of web-based registration, the user does not need to re-enter credentials. • In-app registration does not apply to macOS devices.
Allow silent in-app registration only once. (iOS only)	Consider this extra security option if you are: • including Mobile@Work for iOS in the Core App Catalog and •sending an installation request to devices after device users complete registration, such as with web-based registration. In this case, users do not have to reenter their credentials when they launch Mobile@Work. However, you can limit this silent registration with Mobile@Work to one time only by selecting this option.
Silent in-app registration time limit (minutes) (iOS only)	Allows the administrator to specify the silent registration grace period. The minimum can be 1 minute, the maximum 525600 minutes (365 days). The default value is 240 minutes (4 hours).
Apple Web-Based Registration Requirement	Select an authentication option for devices registering with Core through the web: •Password: Select to enable authentication through the web using a password only. •Registration PIN: Select to enable authentication through the web using only a PIN. •Password and Registration PIN: Select to enable authentication through the web using both a password and a PIN. •User and Registration PIN: Select to enable authentication through the web using both their user name and a PIN. These options also apply to macOS devices.

Click Save.
Bulk register the devices on Core.

See “Bulk device registration” in the Getting Started with Core for information on using bulk registration.

After these devices are registered, they will appear in the Devices & Users > Devices page with a status of Pending.
Create a pending device report .
On each device, point the browser to the following URL:

https://<fully-qualified domain name for Core>/go

The registration screen appears.
Enter the requested information for the user who will receive the device.

The registration screen appears.
Instruct the device user to enter the requested information.
Instruct the device user to tap or click Register.

If a terms of service agreement has been defined, it is displayed here.
Instruct the device user to tap or click Accept.
Instruct the device user to follow the on-screen instructions for installing the relevant device management profiles.

Next steps

Create a pending device report

This feature is supported on macOS devices.

A pending device report is used to list the username and the PIN and/or password you will need to complete the registration process on each user’s behalf.

Procedure

Go to Devices & Users > Devices.
Open Advanced Search by clicking the advanced search icon.
Using the query builder, select the following:
- Select Status for Field
- Select Equals for Operator
- Select Pending for Value
Click Search. The devices in pending state are shown in the table.
To download this report in CSV format, click Export To CSV. The report includes the PIN and/or password required to complete registration, as appropriate.

Next steps

For iOS devices, proceed to In-app registration for iOS .