MDM Integration: MobileIron Cloud

Created: Modified: Documentation


This document covers MobileIron Cloud. For MobileIron Core and MobileIron Connected Cloud see this article.

GroundControl can enroll devices touch-free. Devices are assigned to anonymous users, but may then be re-assigned to your users.

Here’s how to export the MDM profile that connects GroundControl to MobileIron Cloud:

Step 1: In the MobileIron Cloud console, click Admin > Apple Configurator.

Step 2: Set the expiration period to its maximum value, 365 days.

Step 3: Turn ON the configuration profile, and click the “Download plist” button.

Screen Shot 2A


(If you are on a Mac, your Mac will try to install the downloaded profile. Don’t do it. Click Cancel.)

Locate the downloaded file. (It may be called “configurator.mobileconfig”.) We’ll upload this file to GroundControl. You may rename this file if you like, but keep the “.mobileconfig” extension.

sign-warning-icon-3Important: Mobile Iron Cloud does not allow simultaneous use of different configuration profiles. Downloading a new configuration profile will disable any older ones.

Step 4: In GroundControl, create a new workflow or edit an existing one.

Step 5: Choose “Add an Item” then “Add Configuration Profile”. Upload the configuration profile from the steps above.

Step 6: Make sure the workflow includes a WiFi network, click save

Your iOS device must be on WiFi to accept the MDM enrollment profile. If you include both in a workflow (good idea) GroundControl will always install WiFi first.

MobileIron Cloud API

You may also choose to integrate with MobileIron Cloud’s API. To do this, you’ll need to fill in some additional data.

  • The address of your server. Often this will just be the server name without an additional path.
  • A username and password for a user with the API role.

Test: When you click Test, GroundControl with verify the settings.

Save:  When you click Save, credentials will be saved but not verified.  Be sure to verify credentials before saving.