Staged user enrollment using audio devices
Disclosed are various embodiments for staged user enrollment using audio devices. In one embodiment, among others, a system includes a computing device and program instructions. The program instructions can cause the computing device to receive a configuration profile for configuring a client device. The configuration profile includes a device policy associated with an organizational group. The program instructions can further cause the computing device to generate a sound payload based on encoding the configuration profile onto a sound signal. A request is received a request from a voice assistant service for configuring the client device. The request is associated with configuring the client device according to the device policy. The sound payload is transmitted to the voice service for broadcasting from a speaker device. The sound payload is broadcast within an audible distance of the client device.
1. A system, comprising:
a computing device; and
program instructions executable in the computing device that, when executed by the computing device, cause the computing device to at least:
configure the computing device to operate in a sound enrollment mode associated with a management service;
receive a sound payload associated with the management service from a microphone associated with the computing device;
access a device policy from the sound payload;
extract a device identifier from an encrypted portion of the sound payload; and
apply the device policy to an operation of the computing device based on the device identifier from the sound payload.
2. The system of claim 1 , wherein the sound payload comprises an encrypted portion and a non-encrypted portion, wherein the encrypted portion comprises at least one of an organizational group identifier, a staging user identifier, or a staging user credential.
3. The system of claim 1 , further comprising program instructions executable in the computing device that, when executed, cause the computing device to at least:
transmit a request for a decryption key to the management service, wherein the request is transmitted based at least in part on a server address in the sound payload;
receive the decryption key from the management service; and
decrypt an encrypted portion of the sound payload using the decryption key, wherein the decrypting the encrypted portion provides access to at least one of a staging user identifier or a staging user credential.
4. The system of claim 1 , further comprising program instructions executable in the computing device that, when executed, cause the computing device to at least:
determine that the device identifier matches a stored device identifier from the computing device; and
enroll the computing device with the management service using a user profile associated with the device identifier.
5. The system of claim 1 , wherein the sound payload comprises a non-encrypted portion, and the non-encrypted portion comprises a uniform resource locator (URL) associated with the management service for enrolling the computing device to be managed by the management service.
6. The system of claim 1 , wherein the sound payload comprises a human-imperceptible portion and a human-perceptible portion.
7. A non-transitory computer-readable medium embodying program instructions executable in a client device that, when executed by the client device, cause the client device to at least:
configure the client device to operate in a sound enrollment mode associated with a management service;
receive a sound payload associated with the management service from a microphone associated with the client device;
access a device policy from the sound payload;
extract a device identifier from an encrypted portion of the sound payload; and
apply the device policy to an operation of the client device based on the device identifier from the sound payload.
8. The non-transitory computer-readable medium of claim 7 , wherein the sound payload comprises an encrypted portion and a non-encrypted portion, and the encrypted portion comprises at least one of an organizational group identifier, a staging user identifier, and a staging user credential.
9. The non-transitory computer-readable medium of claim 8 , wherein the program instructions, when executed, further cause the client device to at least:
transmit a request for a decryption key to the management service, wherein the request is transmitted based at least in part on a server address in the sound payload;
receive the decryption key from the management service; and
decrypt the encrypted portion of the sound payload using the decryption key, wherein the decrypting the encrypted portion provides access to at least one of the staging user identifier or the staging user credential.
10. The non-transitory computer-readable medium of claim 7 , wherein the program instructions, when executed, further cause the client device to at least:
determine that the device identifier matches a stored device identifier from a computing device; and
enroll the computing device with the management service using a user profile associated with the device identifier.
11. The non-transitory computer-readable medium of claim 7 , wherein the sound payload comprises a non-encrypted portion, wherein the non-encrypted portion comprises a uniform resource locator (URL) associated with the management service for enrolling the client device to be managed by the management service.
12. The non-transitory computer-readable medium of claim 7 , wherein the sound payload comprises a human-imperceptible portion and a human-perceptible portion.
13. A computer-implemented method, comprising:
configuring, by a computing device, to operate in a sound enrollment mode associated with a management service;
receiving, by the computing device, a sound payload associated with the management service from a microphone associated with the computing device;
accessing, by the computing device, a device policy from the sound payload;
extracting, by the computing device, a device identifier from an encrypted portion of the sound payload; and
applying, by the computing device, the device policy to an operation of the computing device based on the device identifier from the sound payload.
14. The computer-implemented method of claim 13 , wherein the sound payload comprises an encrypted portion and a non-encrypted portion, wherein the encrypted portion comprises at least one of an organizational group identifier, a staging user identifier, or a staging user credential.
15. The computer-implemented method of claim 14 , further comprising:
transmitting, by the computing device, a request for a decryption key to the management service, wherein the request is transmitted based at least in part on a server address in the sound payload;
receiving, by the computing device, the decryption key from the management service; and
decrypting, by the computing device, the encrypted portion of the sound payload using the decryption key, wherein the decrypting the encrypted portion provides access to at least one of the staging user identifier or the staging user credential.
16. The computer-implemented method of claim 13 , further comprising:
determining, by the computing device, that the device identifier matches a stored device identifier from the computing device; and
enrolling, by the computing device, the computing device with the management service using a user profile associated with the device identifier.
17. The computer-implemented method of claim 13 , wherein the sound payload comprises a non-encrypted portion, wherein the non-encrypted portion comprises a uniform resource locator (URL) associated with the management service for enrolling the computing device to be managed by the management service.
18. The system of claim 1 , further comprising program instructions executable in the computing device that, when executed, cause the computing device to at least:
determine that the device identifier matches a stored device identifier from the computing device.
19. The non-transitory computer-readable medium of claim 7 , wherein the program instructions, when executed, further cause the client device to at least:
determine that the device identifier matches a stored device identifier from the client device.
20. The computer-implemented method of claim 13 , further comprising:
determining, by the computing device, that the device identifier matches a stored device identifier from the computing device.