Skip to content Skip to site navigation Skip to service navigation

Enroll an iOS Device in Mobile Device Management (AirWatch)


Stanford's Mobile Device Management (MDM) service installs profiles on your device that configure and maintain settings on your device. MDM helps protect your privacy and the university's data.

Before you can enroll your iOS device in the MDM service you'll need to install the AirWatch app from iTunes. 

What to expect after you install MDM

It might take a few minutes to fully install the profiles on your device, so please be patient. When the process is complete, you’ll find MDM profiles installed in Settings > General > Profiles & Device Management.

Your device will:

  • Require a passcode to unlock. You can change this setting to "Immediately," one minute, or five minutes. Go to Settings > Touch ID & Passcode and then enter your passcode. Then tap Require Passcode and make a selection.
  • Time out after a period of inactivity and require a passcode to unlock it. You can change your preferences in Settings for a period up to five minutes. Go to Settings > General > Auto-Lock
  • Sync your @stanford email, contacts, and calendar appointments after installation.
  • Require you to enter your email password before you can access your email.
  • Be set up to access the Stanford VPN.
  • Check periodically to make sure it hasn't been jailbroken.
  • Display the AirWatch app and the Stanford App Catalog.
  • Perform otherwise as it did before you installed the MDM.

Before you begin

  • Check that your device is running iOS 10 or later. You cannot enroll a device in MDM if the OS is below 10.

Download AirWatch

You must be using your iOS device to begin the enrollment process.

  1. Install the AirWatch Agent on your iOS device.

    download AirWatch Agent

Enroll in MDM


  1. When the app has finished downloading, tap Open
    Alternatively, you can open AirWatch from your home screen by tapping the Agent app.
    open AirWatch Agent
  2. At the welcome screen, tap Email Address for your authentication method.
    choose authentication method
  3. Enter your Stanford email address and tap Go
    enter your email address
  4. If you didn't enter a valid email address, the next screen  prompts you for a server and group ID. If this screen displays, enter the following and then tap Enroll Device.
    • Server:
    • Group ID: SU-MDM or SU-Google (depending on where your email is hosted; case sensitive)
  5. When the WebLogin screen displays, enter your SUNet ID and password and tap Login.
  6. Select the owner of the device and then tap Next.
    If this is a shared corporate device that should not have an individual's email address associated with it, submit a Help ticket to have the email profile removed after the device is enrolled in MDM.
    select the device owner
  7. Tap Accept to accept the terms of use.
    terms of use
  8. On the Enable Device Management page, tap Redirect and Enable.
    enable device management
  9. When the Install Profile page displays, tap Install
    install profile
  10. Enter your passcode if you are prompted for it. 
  11. Tap Install.
     installing profile
  12. A warning message saying that this profile allows an administrator to remotely manage your device displays. Tap Install.
    Note: This message is standard legal information from Apple and is generated automatically. See the Additional iOS Privacy Information page for more information about this warning.
    warning message
  13. When the Remote Management displays, tap Trust
    trust remote management
  14. If the Password Required prompt displays, enter your email password and then tap OK.
    enter your email password
  15. When the profile has finished installing, the Profile Installed page displays. Tap Done
    profile finished installing
  16. Tap Open to open the AirWatch Agent.
    open this page in agent
  17. Next, a message saying that authentication is complete displays. Tap Done.
    authentication is complete
  18. If you see a message saying the agent would like to send you notifications, tap Allow or OK.
    allow agent to send you notifications
  19. A page showing information about your device displays. You can navigate away from this page.
    device information

Set a passcode

If you do not already have a passcode, you must set one within 60 minutes after your device is enrolled in MDM. The passcode must be a minimum of four digits.

  1. You are prompted to set a passcode if you do not already have one. Tap Continue to set one now.
    notice that a passcode is required
  2. When prompted for a new passcode, enter four or more digits and tap Continue.
    enter a new passcode or four or more digits
  3. Re-enter your new passcode and then tap Save.
    re-enter your new passcode

Set your email password and activate your email

When you enroll in MDM, your @Stanford email is configured on your device. However, you may need to set your email password.
Note: It can take a few minutes for the AirWatch server to provide your device with your email profile.

Tap the Mail app to activate your Stanford email. If you are prompted for your Stanford Mail password enter your email password and tap OK.

You can also set your Stanford Mail password as follows:

  1. On the home page, navigate to Settings > Mail > Accounts > Stanford Office 365 (or the name of your Stanford email account).
  2. Tap Account and enter your email password in the Password field.
    If your email is hosted on Google, use your Google account password.
  3. Tap Done.

Connect to the Stanford VPN

See Configure VPN for Apple iOS for instructions on how to connect to the Stanford VPN with your iOS device.

Manage your mobile device

Once your device is successfully enrolled in Mobile Device Management (MDM), you can manage your device in MyDevices. It can take up to 8 hours before your device appears. See Manage a Mobile Device for more information.

Last modified September 28, 2018