BYOD and matching Devices to Users - JAMF School

Have a look at: https://learn.jamf.com/r/en-US/technical-paper-byod-current/Overview_BYOD

Fore-warning, the answer below is from Jamf’s AI assistant… But my read through feels like it’s pretty accurate to my understanding of BYOD enrollment and Jamf School syncing with ASM.

FWIW, we are 100% school owned devices, SIS uploaded to ASM for Managed Apple Accounts syncing one-way to Jamf School and using on-device enrollment.

****************************

How User Enrollment Works for BYOD iPads

User Enrollment uses a student’s Managed Apple Account (from ASM) as the authentication mechanism. When a student enrolls their own iPad, they sign in with their Managed Apple Account — and Jamf School automatically links the device to that user record. 

The enrollment process from the student’s perspective is straightforward:

1. Open Safari on their iPad and navigate to your school's enrolment URL
2. Enter the Network ID and Location Code (provided by school)
3. They enter their Managed Apple Account
4. Tap Enroll and follow the prompts to install the profile
5. They sign in with their Managed Apple Account password to complete enrollment

At the end of this process, the device is enrolled in Jamf School and automatically associated with that pupil's user account — no manual linking required.

Important Considerations for Jamf Student

User Enrollment — What to Expect

Automatic user association via Managed Apple Account

Device is linked to the student's ASM user record at enrollment

Jamf Student app can be used

Student user accounts with login credentials are required

Device remains unsupervised

Limits some restrictions and payloads compared to supervised devices

MDM profile can be removable by the student

Students can unenroll their own device from Settings

Personal data is protected

Only school/institutional data is managed; personal data is untouched on unenrlolment

Jamf Student Requirement

For Jamf Student to work fully, students need student user accounts with login credentials assigned to a student User group in Jamf School. 

What You'll Need to Set Up

1. Provide pupils with the enrolment URL, Network ID, and Location Code — found in Jamf School under Devices > Enrol Device(s) > On-device enrolment (iOS & macOS)
2. Ensure pupils know their Managed Apple Account credentials — these come from ASM, so if you use federated authentication (e.g., with Microsoft or Google), they may already use these daily
3. Assign pupils to user groups and classes in Jamf School so that Jamf Student can reflect the correct class structure
4. Configure Jamf Student settings under Organisation > Settings > Jamf School Student

Tip: Consider creating a simple one-page guide for pupils to follow when they arrive in August. The enrolment steps are short, but having clear instructions will save a lot of time on the day.

The main trade-off to be aware of is that because these are personally owned, unsupervised devices, some of the more restrictive management capabilities won't be available — but for the purpose of running Jamf Student in a classroom, User Enrollment provides everything you need.

****************************

Here’s a list of the sources that the AI gleaned the above from:

Jamf Product Documentation

• User Enrollment

• Overview

• Enrollment Experience for Personally Owned Devices

• Creating an Automated Device Enrollment Profile

• General Requirements

• Configuring Shared iPad Settings

• Shared iPad Setup

• Configuring Jamf School Student Settings

Jamf Knowledge Base Articles

• 11028768 - Setting up Automated Device Enrollment in Jamf School

• 11028780 - Jamf School Enrollment Guide for iPhones and iPads

• 12330324 - Enrolling a Mobile Device Using Apple Configurator

• 11011202 - What are the requirements for setting up a Shared iPad for Jamf School?

• 11038261 - Managing Shared iPads with Jamf School