Prestage Enrollment with DEP
Please add the ability to set custom attributes for DEP Devices which have not yet enrolled with SimpleMDM.
This would enable us to set some user attributes (email addresses, user names etc.) before handing the device to the user. Right now we are not able to preset a Google account profile for a user for a full zero touch deployment.
The device custom attributes from SAML is very handy, but doesn't negate the need to manually configure devices before enrollment for many reasons including that the SAML information will be user-based, whilst we may need to configure device-specific settings before enrolment. In many cases our users have multiple devices, e.g. iPhone + iPad. We may also not necessarily want to force some users to log in when first setting up their device.
After importing devices into DEP/ASM/ABM and assigning them to SimpleMDM, being able to pre-assign the device to a device group would be helpful in getting the device into the correct group on enrolment, rather than waiting for the device to enrol and either manually changing the device settings to the new group, or doing it via the API.
It would also be helpful to pre-supply the device name and other attributes at this point in time as well.
AdminSimpleMDM (--------, SimpleMDM) commented
A related feature was released today that may be of interest.
Enrollments that are using SAML authentication can now optionally set the device custom attributes based on any SAML attributes that are sent from the IdP at the time of enrollment. For instance, if your IdP provides an attribute called "department" with the value "DevOps" and a custom attribute exists in SimpleMDM named "department", then "DevOps" will be set as the custom attribute value for the enrolling device.
This option can be enabled under the Authentication section of the Enrollments details screen when "SAML" is selected as the authentication method.
Christopher Shon commented
Voting for this!
Came from a company that used JAMF MDM prior to my new company. They had this feature. I miss it alot
Adam Engelbrecht commented
+3. This would be very useful. Especially without the feature of Directory Services integration.