1. Home
  2. Knowledge Base
  3. SureMDM
  4. General questions
  5. How to use “Enrollment Authentication” during device enrollment.

How to use “Enrollment Authentication” during device enrollment.

Enrollment Authentication is a security feature that enhances device enrollment by requiring users to authenticate themselves before their devices are successfully enrolled. By implementing Enrollment Authentication, organizations can ensure that only authorized individuals can enroll their devices, adding additional protection to the enrollment process.

Purpose

This KB article outlines the steps to enable and configure Enrollment Authentication options, such as username and password, one-time password (OTP), or QR code authentication. It provides guidance on completing the enrollment process with authentication.

Prerequisites 

To utilize Enrollment Authentication during device enrollment, ensure you have the following:

  • Access to a device management console or enrollment platform that supports Enrollment Authentication.
  • Administrative privileges to enable and configure Enrollment Authentication options.

Steps

1. Navigate to the SureMDM Console.

2. Click on the Settings icon, and now navigate to Account Settings.

3. Click on Device Enrollment Settings > Device Enrollment Rules.

4. Select the required Authentication Type from the following and click OK.

  • No Authentication
  • Require Password
  • OAuth Authentication
  • SAML Authentication (ADFS/Azure AD/OKTA/Onelogin/Ping One/Google G Suite/Generic)
  • SureldP (42Gears In-House IdP)

    Note: When SureIDP (42Gears In-House IdP) is selected, the Bypass Enrollment Authentication for Apple User Enrollment option is displayed. When enabled, devices bypass the enrollment authentication configured in SureMDM and authenticate using Managed Apple ID credentials. For federated Apple accounts, authentication follows the identity management settings configured in Apple Business Manager (ABM). This option applies only to iOS and macOS devices.
  • LDAP Authentication

5. Now click on Apply.

Conclusion

By configuring Enrollment Authentication in the SureMDM console, administrators can define the authentication method used during device enrollment based on their organizational requirements.

Need more help? Here’s how to get help from our experts. 

CONTACT US

Was this helpful?
YesNo
Updated on October 2026
Need Support?
Can't find the answer you're looking for?
Contact Support