Level 1.5: Cupcake

Question

Barcode setup without ENROLLMENT_TOKEN

Forum|Forum|8 months ago
July 10, 2025
3 replies
60 views

Hi

We are preparing to enroll over 600 Zebra and Honeywell barcode scanners into Microsoft Intune. These devices are distributed across more than 250 locations and span over 35 distinct configuration profiles. To ensure a smooth rollout, especially for our non-technical users, we aim to automate the enrollment process as much as possible—minimizing manual input and reducing the risk of user errors, including Wi-Fi setup.

Our intended workflow is for users to simply scan a QR code at the initial "Hi there" screen. This QR code should contain the necessary Wi-Fi configuration and trigger device provisioning via the Google Zero-Touch portal, bypassing the setup wizard entirely.

However, when we generate a QR code using the following JSON configuration, the Wi-Fi settings are not being applied as expected. After the QR code is scanned, the device proceeds to the Wi-Fi setup screen, where users are required to manually enter the network configuration.

According to Google’s documentation, the EXTRA_ENROLLMENT_TOKEN is optional.

Is it possible to fully automate this step without including the token, or is it required in practice for the Wi-Fi configuration to be applied correctly?

Any help would be much appreciated—thank you!

{
    "android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.google.android.apps.work.clouddpc/.receivers.CloudDeviceAdminReceiver",
    "android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM": "I5YvS0O5hXY46mb01BlRjq4oJJGs2kuUcHvVkAPEXlg",
    "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "https://play.google.com/managed/downloadManagingApp?identifier=setup",
    "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {
        "android.app.extra.EXTRA_PROVISIONING_WIFI_SSID": "**SSID**",
        "android.app.extra.EXTRA_PROVISIONING_WIFI_PASSWORD": "**PASSWORD**",
        "android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE": "WPA",
        "com.google.android.apps.work.clouddpc.extra.EXTRA_PROVISIONING_SKIP_USER_CONSENT": true,
        "com.google.android.apps.work.clouddpc.extra.EXTRA_PROVISIONING_SKIP_USER_SETUP": true,
        "com.google.android.apps.work.clouddpc.extra.EXTRA_PROVISIONING_SKIP_ACCOUNT_SETUP": true,
        "com.google.android.apps.work.clouddpc.extra.PROVISIONING_SKIP_EDUCATION_SCREENS": true
    }
}

W

wbaeckAuthor

Level 1.5: Cupcake

I also tried this json as QR code but then the Zero Touch configuration from the portal is ignored:

{
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.google.android.apps.work.clouddpc/.receivers.CloudDeviceAdminReceiver",
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM": "I5YvS0O5hXY46mb01BlRjq4oJJGs2kuUcHvVkAPEXlg",
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "https://play.google.com/managed/downloadManagingApp?identifier=setup",
  "android.app.extra.PROVISIONING_SKIP_EDUCATION_SCREENS": true,
  "android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE": "WPA",
  "android.app.extra.PROVISIONING_WIFI_SSID": "**SSID**",
  "android.app.extra.PROVISIONING_WIFI_PASSWORD": "**PASSWORD**"
}

Is there no way to just read the Wi-Fi config via QR code and the rest is pulled down from ZT portal?

mattdermody

Level 3.0: Honeycomb

I am not 100% on this but I want to say that Zero Touch and QR based enrollment are independent of one another. Zero Touch is generally a bit of a misnomer considering it requires numerous touches, especially when manually having to type in WiFi credentials. It is more like Zero Touch for IT admins, but lots of touches for end users. For line of business devices from Honeywell and Zebra I generally recommend other enrollment strategies like QR or StageNow (Zebra) or Enterprise Provisioner (Honeywell). If you're already having the users scan a QR code containing the WiFi credentials you might as well complete the whole enrollment at that time and avoid the overhead and added complexity of ZTE entirely.

ZTE can be painful with these mission critical devices that go in for repair on repair contracts as you typically are required to unenroll /deregister devices from the ZTE portal before shipping them in which can become a bottleneck in you RMA process.

"Zebra requires customer to deregister their Android device from Android zero-touch portal prior to sending the unit in for hardware inspection and repair."

https://supportcommunity.zebra.com/s/article/Deregister-a-Device-from-Android-Zero-Touch-Enrollment?language=en_US

mattdermody

Level 3.0: Honeycomb

And I forgot to mention, I highly advise against using Intune for line of business Android devices from Zebra and Honeywell.

Moombas

Level 4.4: KitKat

What @mattdermody says is a valid advise. Intune is good enough for most, but for mission ciritical devices it is not a go to platform. It isn't very stable, it is sloooow and you miss out on some features that Intune has not implemented.

For our customers (with over 20.000 zebra barcode scanners), we highly recommend Workspace one. Its stable (the platform, the company behind isn't their yet), its fast, and enrollment can be completely automated and is very simple. For example, with the StageNow integration you could setup a barcode scanner by scanning just one or two barcodes and you are good to go in minutes. This is a usefull feature when you need to quickly replace a barcode scanner on a location that doesn't necessarily have an IT on site.

Edit: To respond to your original question, I believe it is not possible to send wifi details with Android ZTE. It is possible with some other MDM's like Workspace one and Knox manage. With Knox Mobile enrollment (samsung only) you could also generate a QR with embedded wifi and integrate that with Intune. But that will not solve your issue.

And StageNow for example has the possibility to encrypt the barcode data, so you can not read out for example the wifi password out of it in clear text which in my opinion should be a thing for all Wifi barcodes but isn't.

I really like the possibility to share(/add) Wifi via QR but that you get it displayed there in cleartext and also able to look it up from the QR in cleartext is, security wise, weird.

Emilie_B

Community Manager

Hi @wbaeck - just wanted to check in and see if your issue was solved?

@mattdermody, @Moombas, @Michel and @BenCowell thanks for jumping in and helping out!

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded