administrator help
2. Click the blue triangle next to the Self Service Portal group for which you want to configure the Android for Work device enrollment, and then click Edit. Or create a new group.
The Self Service Portal group must be configured for the Android platform.
For details on the Self Service Portal configuration, see Configure Self Service Portal settings
(page 25).
3. In at least one of the columns Initial package - corporate devices and Initial package -
personal devices, you must select a task bundle to be executed on corporate and personal devices.
4. Set whether enrollment is required or not in Android for Work - corporate devices and
Android for Work - personal devices.
■
■
Optional: Users can choose to enroll with Android for Work when they enroll their devices with Sophos Mobile Control.
Required: Enrollment with Android for Work is mandatory.
5. Click Apply.
6. In the Group settings tab, click Save.
19.3 Manage Android for Work users
A user must have a Managed Google Account to enroll a device with Android for Work. This
Android for Work account is connected to the domain that you registered with Google.
Android for Work account names are formed like an email addresses, for example user@your_android_for_work_domain
.
When a user enrolls a device with Android for Work on the Self Service Portal, Sophos Mobile
Control checks if an Android for Work account for the user already exists on the Google server.
For this, the left part of the user’s email address in Sophos Mobile Control is combined with your
Android for Work domain. If an account with that name does not exist, Sophos Mobile Control creates it.
Example: If the user’s email address in Sophos Mobile Control is user@your_company.com
and your Android for Work domain is your_android_for_work_domain
, Sophos Mobile
Control checks the Google server for an account user@your_android_for_work_domain
.
Other than creating an Android for Work account during enrollment, Sophos Mobile Control does not manage the account lifecycle. If you delete the user account in Sophos Mobile Control, the user’s Android for Work account remains.
You can manage the Android for Work accounts for your domain from the Google Admin console.
If required, you can create Android for Work accounts from your LDAP directory, using Google
Apps Directory Sync (GADS).
Related Links
Google Admin console (external link)
About Google Apps Directory Sync (external link)
193
