fleet/articles/android-byod-mdm-migration.md
kitzy c131c6aab7
Updates from cs offsite (#42750)
Updates to Android MDM documentation from the CS offsite.

---------

Co-authored-by: Steven Palmesano <3100993+spalmesano0@users.noreply.github.com>
2026-03-31 14:42:59 -04:00

3.4 KiB

Android BYOD MDM migration

On BYOD Android devices, enrolling in an MDM installs a Work Profile, which segments corporate apps and data from the end user's personal information.

Prerequisites

  • Set up Android MDM in Fleet.
  • Get a Fleet enrollment link for the fleet. Follow our Enroll hosts guide for instructions on how to get this link.

Remove the old Work Profile

Before migrating from another MDM to Fleet, remove the existing Work Profile from the device.

  1. On Google Pixel devices, open Settings > Passwords, passkeys & accounts > Work > Remove work profile.
    • On Samsung devices, open Settings > Accounts and backup > Manage accounts > Work > Uninstall Work profile.
  2. After selecting Delete on the confirmation dialog, the old Work Profile will be removed from the device.

Enroll in Fleet

Send the enrollment link to end users to open in a web browser. An easy alternative is to use a QR code. To generate a QR code using Chrome:

  • Open the enrollment link on a computer.
  • Right-click the page, then select Create QR Code for this Page.
  • If this option is missing, select the three dot menu icon on the right side of the toolbar > Cast, Save, and Share > Create QR Code.
  1. Open the enrollment link on the Android device.
    • If end user authentication is set up for the fleet, authentication via SSO is required. After successfully authenticating, a page with an Enroll button will appear.
  2. Select Enroll. A "Set up your work profile" screen will then appear.
  3. Select Next. The next screen will describe what a Work Profile is.
  4. Select Accept & continue.
    • On Samsung devices, this is Agree.
    • The Work Profile setup will then begin, and on Samsung devices, there may be one more prompt to select Next.
    • A series of enrollment screens will appear. When the Work Profile is active, a briefcase icon appears in the status bar on Google Pixel devices, and in the lower right corner on Samsung devices.
  5. If Google authentication is enabled in Google Admin, sign in using your work Google account.
    • If Skip is selected at this screen, you will later be required to sign in to this Google account to access apps like Google Calendar.
  6. When enrollment is complete, the Work Profile screens will go away and you will be brought back to the web browser with the Fleet enrollment page. You can close this tab.

Open the App Drawer (swipe up at the home screen, or select the Apps icon), and a separate tab will appear for Work Profile apps. These apps have a briefcase icon in the bottom right corner of their icon.

When signing in with a work Google account, if the device doesn't meet the requirements set up by the admin in Google Admin, you will be prompted to resolve these.