MaaS360: Ask Me Anything about Android device enrollment and management

Thank you for joining our recent Ask Me Anything session on Android device enrollment and management with MaaS360. In this blog, we’ve recapped the key highlights and answered some of the  FAQs to help you get the most out of MaaS360’s Android capabilities and recent updates.

You can find the May 21st, 2025 replay and presentation here: MaaS360 AMA about Android device enrollment and management

Key Takeaways:

Below are the steps and processes for implementing and managing Android devices in an organization using IBM MaaS360.

1.    Integrate Android Enterprise with MaaS360

·      Must use one of the following:  Managed Google Play account or Google Workspace account

2.    Profile Owner vs Device Owner

·      Profile Owner has a Personal profile and a Work profile on the device. This enrollment method is typically used for employee-owned or BYOD devices

·      Device Owner only has the work profile; MaaS360 takes full control of the device, factory reset is needed to enroll the device. Typically used for corporate-owned devices

3.    Android Enrollment programs

·      Profile Owner

                                              i.    Standard Enrollment Invitation (Add Device)

                                             ii.     Self enrollment URL

·      Device Owner

                                               i.    QR code

                                             ii.     Samsung Knox Mobile Enrollment (KME)

                                            iii.     Android Zero Touch (AZT)

10 Step Checklist:

1. Create Google account, save credentials

2. Connect MaaS360 / Google Play

3. Test app synch and confirm

4. Configure settings for enrollment and authentication

5. Perform PO test enrollment

6. Configure DO enrollment settings

7. Perform DO test enrollment

8. Configure policy (Android Enterprise settings), test on device(s)

9. Advanced enrollment types: automation (KME/AZT, OEMConfig)

10. Advanced configurations: non-Google Play, specific use cases

FAQs:

Q: What is the difference between Device Account and User Account?

A: Device Account: can be active on one device at a time. You can select this option if you want to use the same QR code for bulk device enrollments, typically used on Corporate-Owned devices.

User Account: The number of devices to be enrolled using this option should be less than or equal to 10, typically used on User Enrollments.

Q: How is Kiosk Mode Configured? 

A: Kiosk mode is set up in the Android MDM policy in MaaS360; only Device Owner devices can utilize Kiosk Mode.

Q: Can you add a personal Google account to the Play Store? 

A: Yes, you can add a personal account to the Play Store, provided that Account Modifications is set to Yes in the MDM policy. Conversely, if you wish to prevent this, simply set Account Modifications to 'No' within the policy settings.

Q: How is Factory Reset Protection (FRP) configured?

A:  Factory Reset Protection (FRP) is configured in MaaS360 under Security > Device Security > Enable Factory Reset Protection. It's crucial to set this up correctly, as improper configuration can render your device unusable. For step-by-step guidance, refer to our YouTube tutorial here.

Upcoming Webinars & Community Engagement

Our next Ask Me Anything will cover Action Orchestrator and will take place on July 16^th, 2025. The webinar team will also be hosting a Deployment Checklist Webinar on August 6^th, 2025.

If you have a topic you'd like us to cover, feel free to leave a comment below or send your suggestion to the IBM MaaS360 Customer Success team at csmaas@us.ibm.com. We’re grateful for your ongoing support and can’t wait to help you take full advantage of the new features."

Best Regards,

IBM MaaS360 Support Team