Sending group enrollment invitations in XenMobile

Contributed by John Bartel III

You can send enrollment invitations to groups and nested groups in XenMobile Server. Enrollment invitations aren’t available for Windows devices.

When setting up the group invitation, you can specify one or multiple device platforms. You can also tag devices so that you can, for example, distinguish corporate-owned devices from employee-owned devices. Then, you set the authentication type for user devices.

Note:

如果你打算使用自定义通知模板,you must set up the templates before you configure enrollment security modes. For more information about notification templates, seeCreate and update notification templates.

For more information on basic configurations on user accounts, roles, and enrollment security modes and invitations, seeUser accounts, roles, and enrollment.

General steps

1. Within the XenMobile console, navigate toManage > Enrollment Invitations.

2. ClickAddtoward the upper left of the screen and then clickAdd Invitation.

3. ClickGroupfrom theRecipientmenu.

   This step lets you choose one or multiple platforms. If you have a mix of different operating system platforms within your company, choose all platforms. Only clear the platform selection if you are sure that no users are using the particular platform.

4. You can choose to tag devices during the invite process. ChooseCorporateorEmployee.

   Tagging makes it easy to separate corporate-owned devices and employee-owned devices.

5. In theDomainlist, choose the domain in which the group exists.

6. In theGroup列表中,选择活动目录group you want to send the invites to.

7. TheEnrollment modeallows you to set the type of authentication security that you prefer for users.

   • User name + Password
   • High Security
   • Invitation URL
   • Invitation URL + PIN
   • Invitation URL + Password
   • Two Factor
   • User name + PIN

   Note:

   To send enrollment invitations, you can only useInvitation URL,Invitation URL + PIN, orInvitation URL + Passwordenrollment security modes. For devices enrolling withUser name + Password,Two Factor, orUser name + PIN, users must manually enter their credentials in Secure Hub.

8. For theAgent Download,Enrollment URL,Enrollment PIN, andEnrollment Confirmationtemplates, choose the custom notification template that you have created in the past. Or, choose the default that is listed.

   如果你打算使用自定义通知模板,you must set up the templates before you configure enrollment security modes. For more information about notification templates, seeNotifications.

   For these notification templates, use your configured SMTP server setup within XenMobile. Set your SMTP information first before proceeding.

   Note:

   TheExpire afterandMaximum Attempts选择改变的基础上Enrollment modeoption that you choose. You cannot change these options.

9. Select ON forSend invitationand then clickSave and Sendto complete the process.

Nested group support

You can use nested groups to send invites. Typically, nested groups are used in large-scale environments where groups with similar permissions are bound to each other.

Navigate toSettings > LDAPand then enable theSupport nested groupoption.

Troubleshooting and known limitations

Issue:Invites are being sent out to users even though they have been removed from an Active Directory group.

Solution:Depending on how large your Active Directory environment is, it could take up to six hours for changes to propagate to all servers. If a user or nested group is removed recently, XenMobile may still consider those users as a part of the group.

Therefore, it’s best to wait up to six hours before sending out another group invite to your group.