使用 Google 注册进行身份验证
Authenticate Using使用 Google enrollment注册进行身份验证 (also referred to as也称为 Google Authentication for Enrollment身份验证注册) lets允许用户在 usersAndroid authenticate with their设备注册期间使用其 Google Workspace account during Android device enrollment.帐户进行身份验证。
This此功能仅适用于使用管理 featureGoogle is域(Google available only forWorkspace)的企业 Android enterprises环境。 backed
如何找到它
by在仪表盘中,打开 a设备注册令牌,并选择 managed使用 Google domain (Google Workspace).
Where to find it
In the dashboard, open Enrollment tokens设备注册进行身份验证 and选项卡。 select the Authenticate Using Google Enrollment tab. The tab is shown only when只有当配置了 Android Management is configured and the设备管理且 Google Workspace integration is available for your enterprise. 集成适用于您的企业时,才会显示该选项卡。
Enable (or disable) Google Authentication启用(或禁用)Google身份验证
Google Authentication is enabled from the Google身份验证已从Google AdminAdmin控制台启用。更改设置后,返回Cerberus consoleEnterprise并使用刷新状态. After changing the setting, return to Cerberus Enterprise and use Refresh Status to reload the current configuration. 重新加载当前配置。
-
Log in to your使用管理员帐户登录到您的 GoogleAdmin console管理控制台with an administrator account.。 Open打开Devices设备.。Go to转到Mobile & endpoints移动设备与终端 →Settings设置 →Third-party integrations第三方集成.。Find the找到 Android EMMintegration集成,用于 Cerberus Enterprise,然后打开。- 点击 管理 EMM 提供商。
- 切换 使用 Google 身份验证
for以启用或禁用 Google 身份验证注册。 - 点击 保存。
- 返回 Cerberus Enterprise
and open it. Click控制面板,然后点击Manage刷新状态EMM providers.Toggle选项卡上的Authenticate Using Googleto enable or disable使用 Googleauthentication for enrollment.ClickSave注册进行身份验证.Return to the Cerberus Enterprise dashboard and clickRefresh Statuson theAuthenticate Using Google Enrollmenttab.。
Google Authentication Enrollment Token身份验证注册令牌
When当启用 Google Authentication is enabled, the dashboard shows a dedicated enrollment token used for this enrollment mode. The page can show a 身份验证时,仪表板会显示专用于此注册模式的注册令牌。该页面可以显示一个QR code二维码, an ,一个Enrollment Token注册令牌 value, and an 值,和一个Enrollment注册 URL (copyable and sendable by email).(可复制并可通过电子邮件发送)。
Key options主要选项
Allow Personal Usage允许个人使用: controls whether the token can enroll devices for work and personal use (work profile scenarios) or work use only (fully managed / dedicated scenarios).:控制令牌是否可用于为工作和个人用途注册设备(工作配置方案)或仅用于工作用途(完全管理/专用方案)。Fallback Default Policy回退默认策略: the policy applied when the enrolling user does not have a specific:当注册用户未分配特定的 GoogleAuthentication default policy assigned.身份验证默认策略时应用的策略。
Some actions (for example changing token options) can be disabled when the license is expired.某些操作(例如更改令牌选项)在许可证过期时可能无法使用。
Enroll a device注册设备
During enrollment, the user is prompted to authenticate with their注册期间,用户会被提示使用其 Google Workspace account.账户进行身份验证。 After a successful enrollment, the device is associated with the authenticated user.注册成功后,设备会与已验证的用户关联。
Work profile工作资料 (personally-owned devices)个人设备)
-
Share the分享Enrollment URL注册网址with the user. When the user opens it on their给用户。当用户在其 Androiddevice, they are guided through work profile setup and设备上打开该网址时,他们将逐步完成工作资料设置和 Googleauthentication.身份验证。 -
Alternatively, the user can start from或者,用户也可以从 AndroidSettings and choose the work profile setup flow, then scan the QR code or enter the enrollment token when prompted.设置开始,选择工作资料设置流程,然后在提示时扫描二维码或输入注册令牌。
Company-owned devices公司拥有的设备
QR code method二维码方式: on a new or factory-reset device, tap the screen multiple times in the same spot until the QR code prompt appears, then scan the QR code shown in the dashboard.:在新设备或出厂重置设备上,多次在同一位置点击屏幕,直到出现二维码提示,然后扫描仪表板中显示的二维码。- DPC
identifier method标识方式(when QR scanning is not available): follow the setup wizard, connect to(当无法使用二维码扫描时):请按照设置向导操作,连接 Wi‑Fi, then when prompted to sign in enterFi,然后在提示输入登录信息时输入 afw#setupand proceed by scanning the QR code or entering the enrollment token. When prompted, authenticate with the并继续扫描二维码或输入注册令牌。在提示时,使用 Google Workspaceaccount.帐户进行身份验证。
For general有关通用的 Android provisioning procedures (work profile vs fully managed), see the standard配置流程(工作资料与完全管理的区别),请参见本手册中的标准 Android enrollment pages in this manual.注册页面。