Android enrollment allows your organization to manage and configure Android devices for work. The enrollment process depends on whether the device is personally owned or company-owned.

Swif supports:

Important: Choose the device’s current setup state carefully. An existing personal device can be enrolled without a factory reset only in BYOD mode. Fully managed company-owned enrollment must begin during initial device setup.

Learn more at Understanding Android Device Management (MDM) Modes: Full Managed, Work Profile, and BYOD.

Before enrolling a device:

If Android Enterprise registration has not been completed, Swif will prompt an administrator to register before generating enrollment details.

Swif supports two primary Android enrollment modes.

When generating QR code, the work identity email will be used to auto assign the enrolled device to the right device employee owner.

Use BYOD enrollment when an employee wants to enroll an existing personal device without deleting personal applications, photos, messages, accounts, or other data.

When Personal Usage is set to Allowed, Android creates a separate work profile.

The organization can manage the work profile, including its:

Personal applications and data remain outside the work profile and are not converted into managed company data.

Management capabilities are more limited than on a fully managed device because Swif manages the work profile instead of the entire device.

Learn more about Android BYOD limitation.

In the Swif Admin Dashboard:

On the Android device:

Menu names can vary slightly depending on the Android version and device manufacturer. Search Settings for work profile if the option is not displayed under Set up & restore.

Important: Do not scan the BYOD enrollment QR code directly with the regular Camera application. The QR code must be scanned from Android’s Set up your work profile enrollment flow. Scanning it with the Camera application can produce an error or fail to start enrollment.

After enrollment, Swif displays the device as BYOD. The device will have separate personal and work profiles.

Use fully managed enrollment for company-owned devices on which the organization requires management of the entire device.

When Personal Usage is set to Disallowed:

Yes. Android requires fully managed enrollment to begin during the initial setup of a new or factory-reset device.

A device that has already completed Android Setup cannot be converted to fully managed mode using a QR code or enrollment code. It must first be factory reset.

A separate reset is not required when the device is new and still displays its initial welcome screen.

Warning: A factory reset deletes applications, accounts, settings, and locally stored data. Back up any required information before resetting the device.

In the Swif Admin Dashboard:

On the Android device:

Do not complete the normal Android Setup flow before starting enrollment. Fully managed enrollment cannot be initiated after the device reaches its normal Home screen.

If the new or factory-reset device cannot scan the QR code:

The afw#setup method is intended for new or factory-reset company-owned devices. Do not use it to create a BYOD work profile on an existing personal device.

If the BYOD QR code cannot be scanned:

Do not enter afw#setup on an existing personal device. That provisioning method is for device setup and fully managed enrollment.

Android zero-touch enrollment allows eligible company-owned devices to enroll automatically during initial setup without manually scanning a QR code.

Zero-touch enrollment requires:

Contact your IT administrator or device reseller to determine whether zero-touch enrollment is available.

Admins can now use the bulk invite flow to enroll multiple Android devices simultaneously. This feature supports unique QR code generation per employee identity and provides flexible personal usage options to streamline the onboarding process.

Upon successful enrollment, the Swif Mobile Security for Android app is automatically deployed to the device to ensure real-time security and compliance monitoring.

After enrollment, follow these steps to ensure the device is correctly managed:

For more details on the app's features, you can refer to the Introducing Swif Mobile Security for Android article.

Confirm that the QR code is being scanned from the correct location.

For a personal device, use:

Settings > Google > Set up & restore > Set up your work profile

Do not use the regular Camera application. The Camera application can read the QR code visually but cannot initiate the required Android Enterprise work-profile provisioning flow.

Also confirm that:

If scanning still fails, enter the enrollment code manually from the same work-profile setup flow.

Do not factory reset a personal device unless the user has backed up their data and a reset is specifically required for another reason.

Fully managed enrollment cannot be added after normal Android Setup has been completed.

Back up the required data, factory reset the device, and begin enrollment from the first welcome screen after the reset.

Neither scanning the company-owned QR code with the Camera application nor manually entering the enrollment code from the normal Android interface can bypass this requirement.

Yes, but only when enrolling the device as BYOD with Personal Usage set to Allowed.

A device cannot preserve its existing personal environment while being converted to fully managed, company-owned mode. Fully managed enrollment requires a new or factory-reset device.

afw#setup is not the fallback enrollment method for an existing BYOD device.

Use the following enrollment path: