Stage Android device enrollment | Microsoft Intune new

Device enrollment
Stage Android device enrollment to reduce end-user steps
To reduce the enrollment time for end users, Microsoft Intune supports device staging for Android Enterprise devices. With device staging, you can stage an enrollment profile and complete all related enrollment steps for workers receiving these devices:

Corporate-owned fully managed devices
Corporate-owned devices with a work profile
When frontline workers receive the devices, all they have to do is connect to Wi-Fi and sign in to their work account. A new device staging token is required to enable this feature. For more information, see Device staging overview.
Token types
When you create an enrollment profile in the admin center for one of the supported management types, you have to select the token type. Your options include the default token and the staging token. Each type enables a different enrollment experience.
The staging token enables a staged version of the enrollment flow so that you or a third-party vendor can complete the admin and end user steps. This process requires more work from the admin or third party vendor than the end user.

There are three stages during this process:

Stage 1 - Completed by admin
Stage 2 - Completed by admin or third-party vendor
Stage 3 - Completed by end users
The device is userless in stage 1 and stage 2. It becomes user affiliated during the last stage. End users complete the last stage when they get the device and sign in to the Microsoft Intune app with their work or school account. Devices are ready to use after sign-in.

In the first stage, an Intune admin completes the following steps:

Create the enrollment profile and staging enrollment token in the admin center.

Set the token's expiration date.

Optionally, in the admin center, create a dynamic device group or an assignment filter so you can assign policies and apps in the user stage. The dynamic device group feature isn't available to configure in the remaining stages.

In the second stage, an Intune admin or third-party vendor completes the following steps:

Unbox, assemble, and power on the new device you're enrolling.

Complete the enrollment steps and setup wizard. When you get to the sign-in screen, stop. Don't sign in.

With the device, scan the staging token's QR code or enter the token string.

Turn off the device and distribute it to the end user.

During stage 2, the Intune assignment filter is the only available option for targeting policies and apps. After the final stage ends, you can use other supported targeting options. Example: User security groups and dynamic groups

In the third, and final stage, an end user completes the following steps:

Power on the device.

Open the Microsoft Intune app, and then sign in with your work or school account.

Complete the remaining enrollment steps. When enrollment is done, the device is ready for use at work or school.

Note