Connected provisioning
Disclosed are various embodiments for provisioning client devices. An enterprise credential can be obtained from a provisioning service. A client device can send an enrollment request to a management service specific to the enterprise associated with the client device. The management service can send an enrollment response to the client device. Then, the client device can receive a provisioning package from the management service. Next, the computing device can then be configured based upon the enrollment response.
1. A system, comprising:
a computing device comprising a processor and a memory; and
machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
obtain an enterprise credential from a provisioning service, the enterprise credential being unique to an enterprise associated with the computing device with respect to another enterprise;
send an enrollment request to a management service specific to the enterprise to enroll the computing device with the management service, the enrollment request comprising at least the enterprise credential;
receive an enrollment response from the management service, the enrollment response comprising a first provisioning package (PPKG) file; and
configure a staging user account based at least in part on the first PPKG file.
2. The system of claim 1 , wherein the first PPKG file comprises at least one of an application installer for an application to be installed on the computing device or a configuration value for a configuration setting of the computing device.
3. The system of claim 1 , wherein the machine-readable instructions that cause the computing device to obtain an enterprise credential from a provisioning service, further cause the computing device to at least:
query a data store to search for a provisioning address associated with the provisioning service; and
contact the provisioning service located at the provisioning address to obtain the enterprise credential.
4. The system of claim 3 , wherein the machine-readable instructions that cause the computing device to contact the provisioning service, further cause the computing device to at least provide a device identifier to the provisioning service for authentication, the device identifier being unique to the computing device.
5. The system of claim 1 , wherein the enterprise credential comprises an enterprise identifier associated with the management service and a one-time authentication token.
6. The system of claim 5 , wherein the enrollment request further comprises the one-time authentication token and a device identifier unique to the computing device.
7. The system of claim 1 , wherein the machine-readable instructions further cause the computing device to at least:
receive, through the staging user account, a second PPKG file comprising one or more configuration settings; and
apply, using the staging user account, the second PPKG file to the computing device.
8. A method, comprising:
obtaining, by a computing device, an enterprise credential from a provisioning service, the enterprise credential being unique to an enterprise associated with the computing device with respect to another enterprise;
sending an enrollment request to a management service specific to the enterprise to enroll the computing device with the management service, the enrollment request comprising at least the enterprise credential;
receiving an enrollment response from the management service, the enrollment response comprising a first provisioning package (PPKG) file; and
configuring a staging user account based at least in part on the first PPKG file.
9. The method of claim 8 , wherein the first PPKG file comprises at least one of an application installer for an application to be installed on the computing device or a configuration value for a configuration setting of the computing device.
10. The method of claim 8 , further comprising:
querying a data store to search for a provisioning address associated with the provisioning service; and
contacting the provisioning service located at the provisioning address to obtain the enterprise credential.
11. The method of claim 10 , further comprising providing a device identifier to the provisioning service for authentication, the device identifier being unique to the computing device.
12. The method of claim 8 , wherein the enterprise credential comprises an enterprise identifier associated with the management service and a one-time authentication token.
13. The method of claim 12 , wherein the enrollment request further comprises the one-time authentication token and a device identifier unique to the computing device.
14. The method of claim 8 , further comprising:
receiving, through the staging user account, a second PPKG file comprising one or more configuration settings; and
applying, using the staging user account, the second PPKG file to the computing device.
15. A non-transitory, computer-readable medium, comprising machine-readable instructions stored in a memory of a computing device that, when executed by a processor of the computing device, cause the computing device to at least:
obtain an enterprise credential from a provisioning service, the enterprise credential being unique to an enterprise associated with the computing device with respect to another enterprise;
send an enrollment request to a management service specific to the enterprise to enroll the computing device with the management service, the enrollment request comprising at least the enterprise credential;
receive an enrollment response from the management service, the enrollment response comprising a first provisioning package (PPKG) file; and
configure a staging user account based at least in part on the first PPKG file.
16. The non-transitory, computer-readable medium of claim 15 , wherein the first PPKG file comprises at least one of an application installer for an application to be installed on the computing device or a configuration value for a configuration setting of the computing device.
17. The non-transitory, computer-readable medium of claim 15 , wherein the machine-readable instructions that cause the computing device to obtain an enterprise credential from a provisioning service, further cause the computing device to at least:
query a data store to search for a provisioning address associated with the provisioning service; and
contact the provisioning service located at the provisioning address to obtain the enterprise credential.
18. The non-transitory, computer-readable medium of claim 17 , wherein the machine-readable instructions that cause the computing device to contact the provisioning service, further cause the computing device to at least provide a device identifier to the provisioning service for authentication, the device identifier being unique to the computing device.
19. The non-transitory, computer-readable medium of claim 15 , wherein the enterprise credential comprises an enterprise identifier associated with the management service and a one-time authentication token, and wherein the enrollment request further comprises the one-time authentication token and a device identifier unique to the computing device.
20. The non-transitory, computer-readable medium of claim 15 , wherein the machine-readable instructions further cause the computing device to at least:
receive, through the staging user account, a second PPKG file comprising one or more configuration settings; and
apply, using the staging user account, the second PPKG file to the computing device.