Onboarding Android BYOD Devices

This section describes the steps to provision a Bring Your Own Device (BYOD) Android device. BYOD devices are personal property which are then configured to contain separate areas for:

•Personal apps and data.

•Corporate apps and data.

When the Workspace administrator invites you to provision your mobile device, you will receive a welcome email which contains instructions for provisioning your device.

Based on the domain property setting, the registration workflow can be one of the following:

Understanding Your SAML-Based Authentication Email

Where your organization uses SAML authentication, you receive a welcome email. This is similar to the following:

This email contains:

•A registration link to download and install Pulse Secure from the Google Play store.

•An Enterprise URL.

•Instructions for completing the device registration.

Understanding Your PIN-Based Authentication Email

Where your organization does not use SAML authentication, you receive a welcome email. This is similar to the following:

This email contains:

•A registration link to download and install Pulse Secure from the Google Play store.

•An Enterprise URL.

•A provisioning email address.

•A provisioning activation key.

•Instructions for completing the device registration.

Registering Your Android BYOD Device

To set up your device when Pulse Secure is not installed on the device:

1.In your email, click the Android registration link. This installs Pulse Secure.

2.Start Pulse Secure on your device.

The Pulse Secure Welcome screen appears. For example:

3.On this screen:

•Enter the Enterprise URL from your welcome email.

•Click Submit.

The next step depends on whether you have SAML-based authentication.

4.(Optional) If you are using a SAML-based registration, the SAML Login screen appears.

On this screen, enter your corporate user name and password and click Sign In.

A BYOD policy Enterprise User Agreement page appears (skip step 5).

5.(Optional) If you are using PIN authentication, the next screen appears. For example:

On this screen:

•Enter your corporate email address.

•Enter your registration key from your welcome email.

•Click Activate.

The client parses the domain and sends it to a discovery server to fetch the server URL. It then continues with Active Directory (AD) authentication with the server.

To set up the Auto-Discovery experience, you will need to contact Pulse Secure Technical Support using a DevOps ticket. After the needed information is provided (and validated), Technical Support will enable the Auto-Discovery experience for your Email Domain.

A BYOD policy Enterprise User Agreement page appears (continue from step 6)

6.On the Enterprise User Agreement page, press the Accept button to accept the Enterprise BYOD policies.

The Set Up Your Profile page appears.

7.Click Setup and confirm with OK.

If the device is not encrypted, Google will prompt to encrypt the device with encrypt option and then will reboot the device.

8.You must now sign in to your Google account.

•If the user's Google account does not exist, then the Create Account page appears.

•If the Google account exists, the user is taken to the Signing in Account page. Press NEXT to sign into Google with your Google Enterprise Account.

9.After the Workspace registration is complete, the Workspace Apps will be installed automatically in the background.

10.To install optional apps, select Google Play Store > My Work Apps > Library (This navigation option may vary from device to device).