CEM and Samsung KME

[MoZZZa]

Hi All,
I am trying to use KME to enroll devices into CEM.
I have used KME with Intune and linking the KME with an Intune profile was very straightforward.

1. Create the enrollment profile in MS intune

2. The profile generates a QR Code and Token.

3. Copy the token string Into the Custom JSON Data string e.g. {"com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "Enter Intune enrollment token string here"}

4. Add device to the KME profile.

Now when you reset the device or turn on if new. It will automatically link the KME profile to the enrollment profile in Intune.

 

I have this in the Custom JSON Data e.g. {"serverURL":"https://example.com"}

How do i link this to the actuall enrollment profle in CEM?
The devices build but with no policies applies as there is no link to the Fully-Managed profile we have configuered.

 

Regards

 

MoZZa

 

[MoZZZa]

***UPDATE***

After some great work by Boubcar & Richard from Citrix support we identified two issues.

• The Custom JSON format HAD to be changed to fit in with Android 11.0 updates.
• SecureHub could not quite handle the UPN format for user accounts as only SamAccountName was accepted during the enrollment process,
  which caused issues with other SSO settings etc. To resolve this we added extra LDAP settings to enable Email/UPN format.