Setup guide · from scratch
Create an Android Enterprise corporate enrolment profile (QR/token)
Generates the QR code/token that provisions a factory-reset corporate Android as fully managed, COPE or dedicated. Pick the mode by device ownership — fully managed wipes the whole device. BYOD work profile needs no token.
Step 1. In Intune go to Devices > Enrollment > Android tab (Managed Google Play must already be connected).
Screenshot: Devices > Enrollment > Android tab (captured during a live customer build — coming to this page)
Step 2. Under 'Android Enterprise' > 'Enrollment Profiles' pick the mode: Corporate-owned fully managed (COBO), Corporate-owned with work profile (COPE), or Corporate-owned dedicated (kiosk).
Screenshot: Enrollment Profiles list showing the three corporate types (captured during a live customer build — coming to this page)
Step 3. Click 'Create profile', set Name/Description, token expiry and options, then Create.
Screenshot: Create profile Basics pane (captured during a live customer build — coming to this page)
Step 4. Re-open the profile and click 'Token' to reveal the QR code plus numeric string (20-digit fully managed/dedicated, eight-digit corporate work profile).
Screenshot: Profile > Token showing QR code + numeric token (captured during a live customer build — coming to this page)
Step 5. On a factory-reset device tap the setup screen 6 times to open the QR scanner (or use NFC / Google Zero Touch / Samsung Knox Mobile Enrollment / manual token).
Screenshot: Factory-reset device QR-scan enrolment screen (captured during a live customer build — coming to this page)
Step 6. Scan the QR; the device provisions as managed.
Screenshot: Device provisioning progress (captured during a live customer build — coming to this page)
Step 7. For personally-owned BYOD work profile, skip the token — the user installs Company Portal from Google Play and self-enrols.
Screenshot: Company Portal self-enrol on a BYOD device (captured during a live customer build — coming to this page)
See it on a real device.
Decolla is in private build — early-access members see a build defined, deployed and rolled back first.
Get early access