Automatic mobile device management (MDM) enrollment

1. A method of mobile device management, the method comprising:

receiving, at a first device, group selection input that is configured to designate two or more mobile devices of a plurality of mobile devices as members of a group;

assigning a policy to the group, the policy including a set of functions to be implemented at the two or more mobile devices upon enrollment of the two or more mobile devices in a mobile device management system;

generating an optical code based on the policy and the group, the optical code having encoded therein information that upon execution of the optical code is configured to connect the two or more mobile devices with a computer interface on which an enrollment application is accessible and information configured, upon execution, to support enrollment of the two or more mobile devices into the mobile device management system according to the policy assigned to the group;

setting a security feature of an enrollment page, wherein the security feature includes control of disclosure of a characteristic assigned to the group, wherein the characteristic assigned to the group includes a group name or a server associated with the group, and the control of disclosure includes an option to display the characteristic in the enrollment page;

obscuring user identifier information in a uniform resource locator (URL) address embedded in the optical code;

communicating an enrollment invitation to two or more supplementary devices each associated with a user of one of the two or more mobile devices, wherein the enrollment invitation includes the optical code such that the optical code is displayable on a screen associated with the supplementary devices; and

enrolling a first mobile device of the two or more mobile devices in the mobile device management system responsive to receipt of a read signal indicating that the optical code has been scanned by an optical reader of the first mobile device as the optical code is displayed on the screen of the supplementary device associated with the user of the first mobile device, wherein enrollment of the first mobile device includes enabling the set of functions relative to the first mobile device in the mobile device management system.

2. The method of claim 1 , wherein:

the optical code is configured such that a scan by the optical reader automatically submits one or more enrollment details into the enrollment application;

the enrollment application is configured to only receive identification input in addition to the enrollment details to enroll the first mobile device into the mobile device management system;

the identification input includes a user identifier and a password; and

the read signal further indicates that the user identifier and the password is entered at the first mobile device.

3. The method of claim 1 , wherein:

the group is a first group;

the policy is a first policy;

the set of functions is a first set of functions;

the optical code is a first optical code; and

the enrollment invitation is a first enrollment invitation,

the method further comprising:

receiving, at the first device, a second group selection that designates two or more additional mobile devices of the plurality of mobile devices as members of a second group;

assigning a second policy to the second group, the second policy including a second set of functions implemented at the two or more additional mobile devices upon enrollment of the two or more additional mobile devices in the mobile device management system; and

generating a second optical code based on the second policy and the second group, the optical code being configured to connect the two or more additional mobile devices with the computer interface on which the enrollment application is accessible and being configured, upon execution, to support enrollment of the two or more additional mobile devices into the mobile device management system according to the second policy assigned to the second group,

wherein the first set of functions includes at least one function that is not included in the second set of functions.

4. The method of claim 1 , further comprising customizing an aspect of the optical code based on received input, wherein the aspect is configured to facilitate identification of a source of the optical code without effecting a functional parameter of the optical code.

5. The method of claim 1 , wherein a connection of the two or more mobile devices with the computer interface on which the enrollment application is accessible includes:

launch of an app clip associated with the enrollment application that directs a user to an enrollment page is displayed responsive to a first operating system being loaded on the first mobile device;

launch of the enrollment application on which the enrollment page is displayed responsive to a second operating system and the enrollment application being loaded on the first mobile device; and

launch of an application distribution platform on which the enrollment application is available responsive to the second operating system being loaded on the first mobile device and the enrollment application not being loaded on the first mobile device.

6. The method of claim 1 , further comprising removing the enrollment application from the first device following enrollment of the first device in the mobile device management system.

7. The method of claim 1 , wherein the optical code is configured to interface with a local agent at the two or more mobile devices.

8. The method of claim 1 , wherein:

the members of the group have a common attribute; and

the common attribute includes an enterprise role, a security assignment, a privilege to particular information, use of a software application, or device access.

9. The method of claim 1 , wherein the set of functions include:

a use restriction related to a particular software;

an access restriction related to data; and

a privilege relative to a particular software.

10. A non-transitory computer-readable medium having encoded therein programming code executable by one or more processors to perform or control performance of operations comprising:

receiving, at a first device, group selection input that is configured to designate two or more mobile devices of a plurality of mobile devices as members of a group;

assigning a policy to the group, the policy including a set of functions to be implemented at the two or more mobile devices upon enrollment of the two or more mobile devices in a mobile device management system;

generating an optical code based on the policy and the group, the optical code having encoded therein information that upon execution of the optical code is configured to connect the two or more mobile devices with a computer interface on which an enrollment application is accessible and information configured, upon execution, to support enrollment of the two or more mobile devices into the mobile device management system according to the policy assigned to the group;

setting a security feature of an enrollment page, wherein the security feature includes control of disclosure of a characteristic assigned to the group, wherein the characteristic assigned to the group includes a group name or a server associated with the group, and the control of disclosure includes an option to display the characteristic in the enrollment page;

obscuring user identifier information in a uniform resource locator (URL) address embedded in the optical code;

communicating an enrollment invitation to two or more supplementary devices each associated with a user of one of the two or more mobile devices, wherein the enrollment invitation includes the optical code such that the optical code is displayable on a screen associated with the supplementary devices; and

enrolling a first mobile device of the two or more mobile devices in the mobile device management system responsive to receipt of a read signal indicating that the optical code has been scanned by an optical reader of the first mobile device as the optical code is displayed on the screen of the supplementary device associated with the user of the first mobile device, wherein enrollment of the first mobile device includes enabling the set of functions relative to the first mobile device in the mobile device management system.

11. The non-transitory computer-readable medium of claim 10 , wherein:

the optical code is configured such that a scan by the optical reader automatically submits one or more enrollment details into the enrollment application;

the enrollment application is configured to only receive identification input in addition to the enrollment details to enroll the first mobile device into the mobile device management system;

the identification input includes a user identifier and a password; and

the read signal further indicates that the user identifier and the password is entered at the first mobile device.

12. The non-transitory computer-readable medium of claim 10 , wherein:

the group is a first group;

the policy is a first policy;

the set of functions is a first set of functions;

the optical code is a first optical code;

the enrollment invitation is a first enrollment invitation; and

the operations further comprise:

receiving, at the first device, a second group selection that designates two or more additional mobile devices of the plurality of mobile devices as members of a second group;

assigning a second policy to the second group, the second policy including a second set of functions implemented at the two or more additional mobile devices upon enrollment of the two or more additional mobile devices in the mobile device management system; and

generating a second optical code based on the second policy and the second group, the optical code being configured to connect the two or more additional mobile devices with the computer interface on which the enrollment application is accessible and being configured, upon execution, to support enrollment of the two or more additional mobile devices into the mobile device management system according to the second policy assigned to the second group; and

the first set of functions includes at least one function that is not included in the second set of functions.

13. The non-transitory computer-readable medium of claim 10 , wherein the operations further comprise customizing an aspect of the optical code based on received input, wherein the aspect is configured to facilitate identification of a source of the optical code without effecting a functional parameter of the optical code.

14. The non-transitory computer-readable medium of claim 10 , wherein a connection of the two or more mobile devices with the computer interface on which the enrollment application is accessible includes:

launch of an app clip associated with the enrollment application that directs a user to an enrollment page is displayed responsive to a first operating system being loaded on the first mobile device;

launch of the enrollment application on which the enrollment page is displayed responsive to a second operating system and the enrollment application being loaded on the first mobile device; and

launch of an application distribution platform on which the enrollment application is available responsive to the second operating system being loaded on the first mobile device and the enrollment application not being loaded on the first mobile device.

15. The non-transitory computer-readable medium of claim 10 , wherein the operations further comprise removing the enrollment application from the first device following enrollment of the first device in the mobile device management system.

16. The non-transitory computer-readable medium of claim 10 , wherein the optical code is configured to interface with a local agent at the two or more mobile devices.

17. The non-transitory computer-readable medium of claim 10 , wherein:

the members of the group have a common attribute; and

the common attribute includes an enterprise role, a security assignment, a privilege to particular information, use of a software application, or device access.

18. The non-transitory computer-readable medium of claim 10 , wherein the set of functions include:

a use restriction related to a particular software;

an access restriction related to data; and

a privilege relative to a particular software.