The MDM settings page shows the state of your MDM set-up and holds every configuration option in one place. Use it to check platform status, manage integrations, set enrolment behaviour and download generic installers.

Feature/Functionality

Overview

Go to MDM > Settings. The page is split into these sections:

• MDM status. Whether each platform (Apple, Windows, Android, Linux) is active, and the renewal date of your Apple MDM certificate.
• Integrations. The security, identity and compliance tools you have connected, such as SentinelOne or Vanta. Connect and manage them here.
• MDM deployment. The status of your zero-touch deployment integrations:
  • Apple Business, needed for zero-touch deployment on Apple devices.
  • Windows Autopilot, needed for zero-touch deployment on Windows devices.
• Software. The status of your Volume Purchase Programme (VPP) connection, used to deploy apps from the Apple App Store. See App Store Apps.
• Settings. The options described below.
• MDM generic installer. Downloadable enrolment installers for every platform.

How to use

1. Go to MDM > Settings.
2. Check MDM status to confirm each platform is active and note when the Apple MDM certificate needs renewing.
3. Use Integrations, MDM deployment and Software to review or manage each connection.
4. Change the options under Settings as needed.
5. Use MDM generic installer to download an installer or show an enrolment link.

Settings options

Custom transparency URL. Replaces the default "Transparency" link in the Fleet Desktop menu with a URL you choose, so employees land on your own page.

Organisation support. Sets the support link shown in error messages, so employees reach the support resource you pick.

MDM notifications. The email address that receives MDM notifications, for example confirmations of locks and wipes.

Automatic unenrolment. With Activate automatic unenrollment on, devices that stay offline for longer than the Offline Duration are tagged automatically and can also be purged. Turn on Send MDM invites to employees whose devices have been purged to send those employees a fresh invite.

Automatic Windows MDM Migration. With Activate Windows Automatic MDM Migration on, Fleet moves Windows devices that are enrolled in another MDM solution across to Factorial IT automatically.

IdP authentication. With Require IdP authentication on, employees sign in with their work account before their device enrols. The sign-in appears in two places:

• the Zero-Touch Deployment set-up flow on Apple devices
• the Fleet enrolment page opened by the iOS, iPadOS and Android enrolment links

Factorial IT acts as the identity provider for this sign-in, so you do not need to configure anything in SaaS.

Switch it on if employees enrol iPhones or iPads through the enrolment link. Every employee gets the same link, so the sign-in is the only way Factorial IT knows who enrolled the device and can assign it to them. With the setting off, these devices enrol with no owner. See Enrol iPhones and iPads.

Assignment suggestion. Uses AI to suggest which employee each device belongs to, based on device data. You can turn on suggestions only, or also let Factorial IT assign devices automatically from those suggestions.

Device naming source. Decides where device names come from:

• MDM: Factorial IT manages the hostname and pushes it to the device.
• Device: the name set on the physical device syncs into Factorial IT.

MDM generic installer

This section gives you a generic enrolment installer for each platform. It is useful for enrolling devices by hand after the initial set-up.

Available for: macOS, macOS agent (.pkg), iOS, iPadOS, Android (Personal / work profile), Android (Company-owned / fully managed), Windows (x64), Windows (ARM64), Linux (Debian/Ubuntu), Linux (Fedora/CentOS), Linux (Arch).

Android offers two enrolment modes next to each other:

• Personal (work profile). The employee enrols their own device. Company apps and data live in a separate work profile, and personal data stays private.
• Company-owned (fully managed). IT enrols a new or factory-reset company device. Factorial IT manages the entire device.

The Android set-up article walks through each mode from start to finish.

iOS and iPadOS work like Android: instead of a downloadable profile, they use a link to your Fleet enrolment page. Click Download next to iOS · iPhone or iPadOS · iPad to show the QR code. Scan it with the device, or click Open link. Turn on IdP authentication so that each device is assigned to the employee who enrols it.

Click Reset enrollment links to cancel the current installer links and create new ones. The iOS, iPadOS and Android links point to your Fleet enrolment page, so they do not change after a reset.

Troubleshooting and FAQ

Troubleshooting

• iPhones and iPads enrol without an owner. Require IdP authentication is off. Turn it on. Devices already enrolled stay unassigned and need assigning by hand.
• An installer link no longer works. Someone may have used Reset enrollment links. Download the installer again to get the new link.
• Zero-touch deployment is not working. Check the MDM deployment section. Apple devices need Apple Business and Windows devices need Windows Autopilot.
• App Store apps do not deploy. Check the Volume Purchase Programme status in the Software section.

FAQ

1. Do the iOS, iPadOS and Android links change when I reset enrolment links?
   No. They point to your Fleet enrolment page and stay the same.
    
2. What happens to devices that stay offline for a long time?
   With automatic unenrolment on, they are tagged once they pass the Offline Duration and can also be purged. You can send the employee a new invite automatically.
    
3. Can I move Windows devices from another MDM without re-enrolling them?
   Yes. Turn on Activate Windows Automatic MDM Migration and Fleet migrates them to Factorial IT.
    
4. Who sets the device name?
   It depends on Device naming source. With MDM, Factorial IT sets the hostname. With Device, the name comes from the device itself.