- Client
- Financial services joint venture
- Sector
- Financial Services
- Services
- Endpoint Management, Security Enhancement
- Year
- 2023
- Timeline
- Design to rollout
- Read time
- 4 min read
2
Device platforms brought under one management plane
10
Line-of-business apps delivered automatically to both
Zero-touch
Enrolment for new devices, straight from the box
01 · The challenge
What we walked into
The joint venture issued corporate phones and tablets to a growing workforce, and preparing each one by hand had become the slowest part of onboarding. Every device needed the same applications, the same security baselines, and the same compliance posture, applied one at a time by a person.
The business wanted the out-of-the-box experience to do the work. A new device should become a fully managed, compliant corporate device in the time it takes the user to switch it on and sign in, with no staging bench and no manual configuration.
02 · Our approach
How we got there
- 01
Understand the estate
We mapped the corporate device estate across iOS and Samsung, the applications the business depends on, and the enrolment routes each platform offers, so the design could build on what both platforms do well.
Discovery
- 02
Design the enrolment flows
Automated device enrolment through Apple Business Manager for iOS and Samsung Knox for Android, so devices register themselves with Microsoft Intune the moment they first connect.
Core design
- 03
Configure the platform
Security baselines and compliance profiles for both platforms, with the ten line-of-business applications delivered automatically through Apple's Volume Purchase Programme and Managed Google Play.
10 applications
- 04
Pilot, then rollout
A pilot group of technology champions proved the experience before the broad rollout, with hypercare support through the enrolment waves and refinements folded in from what the pilot surfaced.
Phased
03 · The outcome
What changed
Corporate devices now arrive ready to work. Enrolment, applications, security baselines, and compliance apply themselves across iOS and Samsung from a single management plane, and onboarding no longer waits on a staging bench.
Compliant from the first sign-in
Every corporate device reports its compliance posture from the moment enrolment completes, with remediation applied automatically.
One plane for two platforms
iOS and Samsung devices are managed, secured, and updated from a single Microsoft Intune console.
Onboarding without the bench
A new device goes from sealed box to fully configured corporate device in the time it takes to sign in, with no manual preparation in between.
A baseline that holds
Security baselines for both platforms keep the estate aligned to policy as it grows, and platform updates land without a rebuild.
“The first time we unboxed a phone and watched it configure itself, the room went quiet. Onboarding used to be a queue, and now it is just a delivery.”
Technologies
- Microsoft Intune
- Apple Business Manager
- Samsung Knox
- Managed Google Play
- Microsoft Entra ID
A note on confidentiality
Much of our work takes place in regulated and security-sensitive sectors, where the details of a client's environment are confidential by default. In line with our commitments to those clients, identifying details in this case study have been anonymised or generalised, while the work, the decisions, and the outcomes are described as delivered.
If you would like to know more about this engagement, we are happy to discuss it further and can share additional information on request.