Introduction
This document explains how to set up the Oloid DeviceLock app on Android devices using Microsoft Intune (MDM). It covers device enrollment, app installation, auto-pair configuration, and kiosk mode setup to enable secure and managed device usage.
Once configured, devices are enrolled in Intune, the DeviceLock app is installed and paired automatically, and kiosk mode ensures the device runs only the configured application.
Prerequisites
You must have access to the Microsoft Intune Admin Center.
The AutoPairConfig.json file must be downloaded from the Tenant Admin Portal, to generate refer How to Generate Auto-Pair Config File for Oloid DeviceLock App in the Tenant Admin Portal | Oloid Help Center.
The Oloid DeviceLock application must be created and configured in the Tenant Admin Portal.
Steps to Enroll and Set up the Oloid DeviceLock app using Microsoft Intune (MDM)
The DeviceLock app is successfully setup through Microsoft Intune.
Enroll Device and Install Oloid DeviceLock App
The DeviceLock is successfully enrolled and installed.
Create an Intune Device Group
This section explains how to create a dynamic device group in Microsoft Intune. The group automatically includes devices enrolled using a specific enrollment profile, enabling easier app and configuration assignment for DeviceLock setup.
Do the following.
Log in to Microsoft Intune Admin Account.
The Microsoft Intune home page is displayed.
Select Groups.
The Groups|Overview page is displayed.
Click New group to create a new group for Intune users and devices.
The New Group page is displayed.
Do the following.
In Group type, select Security.
Enter Group name.
Enter Group Description (Optional).
In Membership type, select Dynamic Device.
Note: Anyone can scan the QR code and enroll device.
Click Add dynamic query.
The Dynamic Membership rules page is displayed.
Click Configure rules and do the following:
In Property, select enrollmentProfileName.
In Operator, select Equals.
Enter Value.
Note: This will be the name of the Device Enrollment Profile which we will create in the next step.
Click Save.
The New Group page is displayed.
Click Create.
The Group is created successfully.
Go to Groups | Overview, click the number to the right of Dynamic groups to view all the Dynamic groups.
The All groups page is displayed.
The newly group is added in the list.
The Device Group is successfully created.
Create Device Enrolment Profile
This section explains how to create an Android enrollment profile in Microsoft Intune for corporate-owned dedicated devices.
Do the following.
Go to Microsoft Intune Admin Centre home page.
Select Devices.
The Devices | Overview screen is displayed.
Go to Device onboarding > Click Enrollment.
The Devices | Enrollment page is displayed.
Click Android > Select Corporate-owned dedicated devices.
The Corporate-owned dedicated devices page is displayed.
Click + Create policy.
The Create profile page is displayed.
Click Basics tab and do the following.
Enter Name.
Enter Description (Optional).
In Token Type, select Corporate - owned dedicated device (default).
Select Token Expiration Date.
In Apply Device name template, select Yes or No.
(Optional) If you select Yes, enter the device name template.
Note: The value entered in Device name template must match the name used in the dynamic query rule for the device group created in the previous steps.
Click Next.
The Device Group screen is displayed.
Click Next.
Note: Ensure that None is selected.
The Review + create screen is displayed.
Review the details and click Create.
The Create profile page is configured successfully.
Go to Corporate-owned dedicated devices > select Enrollment Profile
Note: Select the enrollment profile that you created in above step.
Select Token > click Show token to view enrolment QR code.
The QR code is displayed.
Scan the QR code after factory resetting your Android device to enroll.
Note: The device automatically becomes a member of the Oloid_DeviceLock_Kiosk group created earlier.
The Device Enrolment Profile is created successfully.
Add DeviceLock Android App
This section explains how to add and assign the Oloid DeviceLock app from Managed Google Play in Microsoft Intune. The app is configured as required so that it is automatically installed on enrolled Android devices.
Do the following.
Go to Microsoft Intune Admin Centre home page.
Click Apps.
The App | Overview page is displayed.
Click Android.
The Android | Android Apps page is displayed.
Click + Create.
The Select app type pop-up is displayed.
In App type, select Managed Google Play app > Click Select.
The Managed Google Play page is displayed.
Enter com.oloid.devicelock in the Search bar > Select Oloid DeviceLock app.
The app is selected successfully.
Click Select > Click Sync.
The Android apps page is displayed.
Note: If you do not see Oloid DeviceLock in the app list, click Refresh and wait for some time.
Click on app Name to assign the app to a group or all devices.
The DeviceLock app page is displayed.
Note: You will find Assigned: No status.
Click Manage > Properties.
The App Information page is displayed.
Click Edit.
The Edit application page is displayed.
Click Assignments tab > click + Add all devices to make the app installation required across all enrolled Android devices and then click Review + Save.
Note: App can be assigned to appropriate device groups as well.The Review + save screen is displayed.
Click Save.
The Edit application page is configured successfully.
Go to Monitor > Device install status. If the list is empty, open Google Play Store in your enrolled Android device. The Oloid DeviceLock app should start installing. Click Refresh to update the Device list.
Note: It may take some time to reflect here.
Add DeviceLock Private App to Managed Google Store
This section explains how to upload and add the DeviceLock APK as a private app in Managed Google Play. Once added, the app is synced with Intune and installed on enrolled devices.
Do the following.
Repeat steps a to c in the previous section.
In the Managed Google Play page, click Private apps icon.
The Private apps are displayed.
Click + icon. (Update this screenshot to not show Intune DeviceLock)
Do the following.
Enter Title.
Click Upload App.
Click Create.
The private app is created successfully.
Click on the app icon you just created.
The app details page is displayed.
Click Select app > click Sync.
Click Refresh on the Android apps page to find the private app in the list.
The DeviceLock app is successfully added to the list of Android apps.
Configure Auto-pair
This section explains how to configure auto-pairing for the DeviceLock app using an Intune app configuration policy.
Do the following.
Download AutoPairConfig.json for your DeviceLock app from your Oloid tenant admin portal. To download refer How to Generate Auto-Pair Config File for Oloid DeviceLock App in the Tenant Admin Portal | Oloid Help Center.
In Microsoft Intune Admin Centre home page, go to Apps > Manage Apps > Configuration.
The Apps | Configuration page is displayed.
Click Create > Select Managed Devices.
The Create app configuration policy is displayed.
In Basics tab, do the following.
Enter Name.
Enter Description (Optional).
In Platform, select Android Enterprise.
In Profile Type, select All Profiles.
Click Select app.
The Associated app popup is displayed.
Select Oloid Device Lock.
Click Ok.
The DeviceLock app is added in the Targeted app.
Click Next.
The Settings tab is displayed.
In Settings tab, do the following.
In Configuration settings format, select Enter JSON data.
In the JSON Template editor that is visible, copy values from the AutoPairConfig.json you downloaded to “valueString” or “valueBool” fields. Use the following mapping:
Refer below Data Table.
AutoPairConfig.json | Intune App Configuration |
ApiKey | ApiKey |
TenantName | TenantName |
TenantID | TenantID |
Environment | Environment |
ApplicationID | ApplicationID |
SkipUserConfirmation | SkipUserConfirmation |
c. Click Next.
The Assignments tab is displayed.
6. In Assignments tab, do the following.
a. Click + Add all devices.
Note: To make the app configuration available to all enrolled Android devices.
You can also select specific device groups by clicking Add groups if needed.
b. Click Next.
The Review + create tab is displayed.
7. Click Create.
The Create app configuration policy is successfully configured.
Configure Managed Home Screen in Kiosk Mode
This section explains how to set up kiosk mode for the DeviceLock app using Managed Home Screen in Intune.
In the Microsoft Intune Admin Centre home page, go to Devices > Manage apps > Configuration.
The Configuration page is displayed.
Click + Create > select Managed devices.
The Create app configuration policy page is displayed.
Do the following.
The Managed Home screen is configured successfully.
Configure Basics
This tab explains how to define the basic details for the device restrictions profile, including name, platform, and profile type required for kiosk mode setup.
Do the following.
Enter Name.
Enter Description (Optional).
In Platform, select Android Enterprise.
In Profile Type, select Fully Managed, Dedicated, and corporate-Owned Work Profile Only.
Click Select app.
The Associated app pop-up is displayed.
Select Managed Home Screen.
Click Ok.
Click Next.
The Basic tab is configured successfully, and Settings tab is displayed.
Setup Settings
This tab explains how to configure kiosk mode settings by selecting the device experience type and assigning the DeviceLock app to run in single-app mode.
Do the following.
In Configuration Settings > Configuration Settings format > select Enter JSON data.
Note: If you do not have JSON data Contact Oloid Support.
Enter the JSON Data in the JSON data field.
Click Next.
The setting tab is configured successfully, and the Assignments tab is dispalyed.
Configure Assignments
This tab explains how to assign the device restrictions profile to target device groups or all enrolled devices in Intune.
Do the following.
Click Add groups to assign this profile to your target device groups.
Note: Click + Add all devices to apply to all enrolled devices.
The Select groups to include pop-up is displayed.
Do the following.
Select the group(s) from the list.
Note: You can select multiple groups.
Click Select.
The Group is added in the list.
Click Next.
The Assignment tab is configured successfully and Review + create tab is displayed.
Configure Review + create
This tab explains how to review the configuration details and create the profile to complete the kiosk mode setup.
The Kiosk mode is configured successfully.
Keywords
| Oloid DeviceLock Intune setup | DeviceLock Android Intune deployment | Oloid DeviceLock MDM configuration | Microsoft Intune DeviceLock setup guide |