Enrolling idenprotect on iOS Device

From idenprotect Knowledge Base
Jump to: navigation, search


Before you can use the idenprotect For Mobile application you need to go through the enrollment process. Please remember that you can only enroll once with the same QR Code.

There are three ways that idenprotect For Mobile applications can enroll:

  • BlackBerry enrollment with Access Key being manually entered by the user
  • BlackBerry enrollment with Access Key with programmatic authentication
  • Non-BlackBerry SAML enrollment

All of these three journeys can be set up via policies on User Enrollment Policies configuration on the idenprotect Core Platform

If you click on the Scan QR Code button camera will be launched and you can scan a QR code provided via email or onboarding page. After scanning a QR code if you have a FaceID enabled device you will be asked to grant permission to use a FaceID Please click "OK"

IOS Face Id Permission.png

BlackBerry enrollment

After granting the permissions if the idenprotect Core Platform is set up to use an Access Key entered by the user, you will be taken to the BlackBerry Authentication screen, where you have to enter your BlackBerry access key which would be provided to you by your via e-mail ( email field will be prefilled for your)

IOS blackberry auth screen.png

From V3.15.0. If the app type that has been configured on the server is not Blackberry or Both when the user scans the QRcode the user will be redirected to download the correct app for their Server's App Type ie "idenprotect" (saml only app) or "idenprotect for Intune" if the app type is Intune.

After entering the BlackBerry Access key you will proceed to the BlackBerry enrollment (if idenprotect Core Platform is set up to use programmatic BlackBerry authentication you will be taken to this screen straight away without entering the access key manually)

IOS BlackBerry Enrollment.png

When BlackBerry enrollment is finished, you would be presented with the idenprotect enrollment screen which tells you what stages of enrollment are complete.

IOS iDEN Enrollment.png

Throughout the enrollment, with idenprotect Core Platform, you may see your screen go to another page to finalize the enrollment and to authenticate to the BlackBerry runtime. After the enrollment process, you will be taken to the idenprotect Unlocked screen which means that your device is ready to use.

SAML Enrollment

If idenprotect Core Platform is set up to allow users to enroll their devices as SAML they will not be able to use BlackBerry Dynamics applications or interact with BlackBerry Runtime.

After scanning a QR code you will be presented with the idenprotect enrollment screen which tells you what stages of enrollment are complete.

IOS iDEN Enrollment.png

When idenprotect enrollment is complete you will be presented with idenprotect SAML page, which contains a "hamburger" menu and the Scan QR Code button.

IOS Saml page.png

idenprotect Both (BlackBerry and SAML) enrollment

The enrollment process for the idenprotect Both is the same as for idenprotect for BlackBerry (please follow the instructions above)