Pre-installing XFA Through Your MDM Is Now Supported

Moving away from a traditional MDM to keep devices secure can feel like a lot to take on. To help you with the migration, XFA now supports pre-installation and automatic linking directly through your MDM, for Intune, Jamf, and SCCM.

When to pre-install XFA through your MDM

Pre-installing XFA through your MDM is a good idea in two situations:

• Replacing your MDM. Verify devices at sign-in with XFA while the MDM is still in place, and shrink its role at your own pace. For a lot of teams, pushing XFA is the last useful job their MDM does.
• Keeping your MDM. Adding deeper coverage: device checks and enforcement at sign-in for the devices your MDM cannot see.

An MDM only sees the devices it manages, so contractors, freelancers, and personal laptops stay invisible to it. XFA verifies those devices too, without ever taking control of them, which is what turns partial visibility into full device coverage.

How to pre-install XFA

You deploy the XFA package the way you deploy any other app, together with an enrollment token from your XFA organization. On first run, the app uses that token to link itself to your organization automatically.

• Push the package. Intune, Jamf, SCCM, or anything else that can deploy a package and a token.
• Devices link themselves. The token tells the app which organization the device belongs to, so enrollment needs no user interaction.
• Opt-in per organization. Nothing enrolls unattended unless you have deliberately turned it on.

Find out how to pre-install XFA through your MDM in our documentation.