Register for Samsung Knox Mobile Enrollment

Snow Device Manager supports the Knox Mobile Enrollment program for bulk and automatic enrollment of Samsung devices supporting the Knox framework. For more information about the Knox Mobile Enrollment program, see https://www.samsungknox.com/en/solutions/mobile-enrollment.

To register for Knox Mobile Enrollment:

  1. Register for a Knox Mobile Enrollment account in the Knox Portal.

  2. Build the Snow Device Manager profile in the Knox Portal by providing:

    • Snow Device Manager Server URI

      Example 9.

      https://[Your Snow Device Manager host address]



      Contact Snow Support if you don't know your Snow Device Manager host address.

    • JSON custom configuration string

      Example 10.
      {
      
      {
      "sdm_customer_name":"Example Customer",
      "sdm_server_url":"https://sdm.yoursdmurl.com",
      "sdm_enrollment_type":"server",
      "sdm_auto_enroll":false,
      "sdm_silent_enroll":false,
      "sdm_force_enroll":true,
      "sdm_lock_enroll_method":false,
      "sdm_domain":"",
      "sdm_username":"",
      "sdm_password":"",
      "sdm_allow_backup":"true"
      }
      }
      

      The following configurations can be set in the JSON string:

      • sdm_customer_name (mandatory) - Customer name. For reference only.

      • sdm_server_url (optional) - Used for enrollment with username. Valid input is a Snow Device Manager server address.

      • sdm_enrollment_type (mandatory) - Valid input is server, usercredentials or companycode. Typically use usercredentials.

      • sdm_force_enroll (mandatory) - Set to true to force the device to enroll. Set to false to allow the user to exit enrollment.

      • sdm_lock_enroll_method (mandatory) - Set to true if email address is the only available enrollment method. Set to false if all enrollment methods are available.

      • sdm_domain (optional) - Used for enrollment with username. Valid input is a Snow Device Manager domain name.

      • sdm_allow_backup (mandatory) - Set to true to allow backup on the device. Set to false to restrict backup on the device.

      The remaining syntax is for upcoming functionality and should be left unchanged.



We recommend using Samsung Knox in combination with the user credential/appstore device enrollment method. In order to do so, the following configurations are needed:

  1. Activate Appstore Enroll in the domain, see Manage services.

  2. Configure a domain keyword to allow for routing enrollment request to your domain.