Try the 30-day, commitment-free Deel MDM Trial to manage your global equipment. This complimentary access to our in-platform Mobile Device Management tool (powered by JumpCloud) offers full access to simplify security and compliance for your distributed team, allowing you to test features and confirm its value.

In This Article

What is the MDM Trial?

MDM Trial Conditions

Step-by-step Setup

.    Activation and connection

.    Accessing MDM

.    Adding devices

.    Creating your first policies

.    Creating device groups

Frequently asked questions (FAQs)

What is the MDM Trial?

The MDM trial is your opportunity to explore the full potential of Deel's IT Mobile Device Management without immediate commitment, helping you decide if our solution is right for your organization. For 30 days, you will have access to all the functionalities available on the product, which combines state-of-the-art endpoint management with synergies with other areas of the Deel platform, such as HR or Access Management. 

During this evaluation, you will get:

• Instant Visibility: See exactly how MDM integrates into your daily Deel dashboard.
• Sandbox Access: Test safely with a dedicated trial account on a Deel-managed JumpCloud tenant (or bring your own).
• Device Management: Manage your devices and trigger remote actions such as lock, wipe, or restart.
• Policy Management: Enforce policies for parts or your entire fleet (security bundles, OS patching, etc).
• Automate Tasks: Safely provision/deprovision device access with set-and-forget workflows or trigger device actions linked to HR lifecycle events.

How the MDM Trial Works

The trial is designed as a self-guided evaluation period. It allows you to get hands-on with the interface and understand the logic of managing global devices through Deel.

Key Rules:

• Duration: You have a full 30 days to explore the platform.
• Self-Driven Setup: This is an evaluation environment; while we provide the tools and guides, Deel does not provide manual configuration assistance during the trial phase.
• Manual Activation: Once you request a trial, our team manually provisions your secure environment, typically within one business day.
• Access Rights: During the trial, you can access the MDM tab without needing a paid "Deel IT" contract, right from the Deel platform, within “Equipment”.

MDM Trial Conditions

• Duration & Cost: Enjoy a completely free, hands-on exploration of the platform for 30 days.
• Setup: This is a self-driven evaluation. Set up and configuration by Deel team members is not included. 
• Access: Trial users can access the functionality in the Deel platform without a paid Deel IT contract, commitment-free.

Step-By-Step Setup

Prerequisites

Your organization must have Deel IT enabled (free tier or paid).

You must be a Deel Admin with the relevant permissions.

One MDM trial per organization only.

Step 1 - Start your journey

Look for the Start free trial option on the platform (MDM Landing Page, in Services, or Deel IT homepage). You will be asked to share a few details to customise your experience:

• Admin name and email for the setup invite
• The number of devices you expect to enroll in the MDM
• Your team's level of experience with MDM tools

Step 2 - Activation and Connection

1. Sit tight: After you submit your request in the previous flow, a Deel admin will set up your trial account (within 1 day).
2. Check your inbox: You will receive an email invite to create your JumpCloud account. 
3. Connect: After creating your JumpCloud account, go to your Deel account and navigate to Equipment > MDM. 
4. Click on Connect JumpCloud. 
5. Follow the instructions: You will need the API key from your new JumpCloud instance, which you can fetch by going to the JumpCloud console > Your profile name > My API Key. You can find more information on how to connect to JumpCloud in the JumpCloud Integration Guide article. 
6. After pasting your JumpCloud API key in the Deel flow, click Connect.
7. Done: Your Deel account is now connected to your JumpCloud instance.

Note: If you already have a JumpCloud account, this step won't be necessary. You'll receive an email when the trial is up.

Step 3 - Accessing MDM

After performing the Deel <> JumpCloud integration, follow these steps to access Deel MDM:

1. While on Deel, go to the Equipment tab
2. Click the tab Mobile Device Management (MDM)
3. You will land in the Overview page of MDM, ready to explore the full product.

Notice that you won’t have any devices showing up here. You will need to add them to JumpCloud first by following Step 4.

Step 4 - Adding devices

Devices are added directly within the JumpCloud portal. Once done, the devices will be synced with the Deel platform. 

After you add devices to your JumpCloud account, you will be able to trigger several actions from Deel, including:

• Remote actions: Wipe, restart, lock, or force shutdown devices.
• App distribution: Force-install or restrict applications.
• OS policies: Configure policies for the devices, such as forcing disk encryption (FileVault/BitLocker), password complexity, update policies, and many more.

You can add devices from 2 sections in the JumpCloud portal:

1. Get started > Device Management > Begin setup (recommended if you are a first-time user), or
2. Via the side menu, navigate to Device Management > Devices.

Note that different Operative Systems require different device enrollment approaches. Don’t worry, these are quite simple. We will guide you through each.

[ACCORDION] Apple Device Enrollment (Mac, iOS)

Apple requires a secure handshake between JumpCloud and your Apple Business Manager account, so you can enroll Mac devices. For this, you must create an MDM enrollment profile and then have the enrollment certificate downloaded and installed on your devices. This security mechanism provides an additional layer of compliance to your devices.

Generating the MDM enrollment profile

First, we start with the MDM enrollment profile creation. This involves a four-step certificate generation process.

Pre-requisites:

• An Apple ID for your organization.
• Access to Apple Business Manager.

Step-by-Step Setup

1. Download your Certificate Signing Request (CSR): In the JumpCloud portal, navigate to MDM > Apple > Configure Apple MDM and click "Download CSR".
2. Sign in to Apple’s Portal: You will be directed to the Apple Push Certificates Portal, where you must log in using your company Apple credentials (Apple ID email address and password).
3. Upload & Sign: Next, upload the CSR file you previously downloaded from JumpCloud. Apple will generate a .pem certificate.
4. Complete the Link: Download the certificate from Apple and upload it back into the JumpCloud console. Add your Apple ID email address as well. Click "Complete Setup".
5. Done: Your Device Enrollment Profile for Mac is now created and is ready to be distributed to your Mac fleet.

Enrolling your Mac Devices

You have successfully created your Apple MDM Enrollment Profile. Let’s now distribute it amongst your workers or team members.

Follow these steps:

1. Go to Device Management > Devices > Add a Mac Device.
2. You now have 2 options
   1. Download the MDM Enrollment Profile and share it with your team members using, for example, Slack, email, or physical means.
   2. Copy the Download Link, which will copy the URL to your copyboard allowing you to share it with members of your organization.
3. The device user should now open the downloaded .mobileconfig file or the downloaded file.
4. A pop-up will appear with the info Profile Downloaded - Review the Profile in the System Settings.
5. The users will now have to go to the device System Settings > Profile Downloaded.
6. The users should now click on the MDM Enrollment Profile to install the MDM profile and hit Enroll.
7. Users should input their device’s account password and finalize the configuration.

Once this is done, the device will now be enrolled in the MDM and synced with JumpCloud and Deel.

You can find further information on how to enroll MacOS Devices in this video walkthrough or in this article.

[ACCORDION] Windows Device Enrollment

The Windows setup is significantly more straightforward. For manual enrollment, you can simply use the MSI installer method.

Step-by-Step Setup

1. Navigate to Device Management > Add Device > Windows. You will need both the MSI installer and the Connection Key found here.
2. Download the MSI Installer: This installs the agent that will live on the device. 
3. Deploy: Run the installer on the target machine.
4. Enter Connection Key: When prompted during installation, the user should copy-paste your unique Connection Key found in the JumpCloud portal. 
5. After the installation, your devices will sync to your JumpCloud account and update device information in pulses of 60 seconds.

Alternatively, you can also opt for the PowerShell method (recommended for silent enrollments) or the Service Package creation method (recommended for light touch device provisioning).

You can find further information on how to enroll Windows Devices in this video walkthrough or in this article.

[ACCORDION] Linux Device Enrollment

For your organization’s members running Linux, enrollment is terminal-based and efficient.

Step-by-Step Setup

1. Navigate to Device Management > Add Device > Linux.
2. Copy the Command: JumpCloud provides a one-line curl command in the Install Command field.
3. Run as Root: Paste the command into the terminal on the target machine. The agent will self-install and report back to the dashboard within seconds.

Note: This process can take up to 2 minutes, depending on conditions. Once installed, the agent will immediately sync to JumpCloud and be visible in your Devices list.

You can find further information on how to enroll Linux Devices in this video walkthrough or in this article.

[ACCORDION] iOS & Android Device Enrollment

Mobile enrollment is driven by QR codes - perfect for remote employees.

• iOS: Requires the Apple MDM Certificate (Step 1 in the Apple Device Enrollment) to be completed first. Once active, users simply scan the QR code in the portal to install the Management Profile. More info here.

Android: Follow the on-screen prompts to enroll via Android Enterprise (EMM).

[/ACCORDION]

Step 5 - Adding your first policies

One critical aspect of an MDM is the ability to create set-and-forget IT Policies for your device fleet, ensuring they are always compliant according to your organization’s needs and up-to-date. Now that you have your Devices added to your account, creating and enforcing these policies is straightforward.

Step-by-step setup

1. Navigate to Policy Management: In Deel MDM, click Policy Management.
2. Select Add Policy Collection.
3. Choose a Template or create your own collection: Deel IT comes with "Best Practice" templates, including:
   1. OS Patch Management: Ideal to enforce operative system updates
   2. Light, Standard, or Enhanced security: Force BitLocker (Windows) or FileVault (Mac), Lock Screen Timeouts, etc
   3. Custom policy groups: build or edit existing templates at your will.
4. Assign to Groups: You can apply policies to your entire company or specific device groups (e.g., "Engineering" gets Docker, "Finance" gets stricter password rotation).
5. Review the specified policies and the device groups that will benefit from them.
6. Hit Confirm when ready.

Step 6 - Create Device Groups

Device Groups is a powerful way of bundling up devices from your company into clusters. You can perform actions in bulk for these, including adding policies.

Step-by-step setup:

1. In the Device Management page, you can find all your available groups on the top, and devices on the bottom grid
2. To create a new Device Group, go to Create Device Group in the upper right corner of the page.
3. Add details, such as the name and description of the group.
4. Select the group type:
   1. Static groups allow you to choose specific devices from all your devices.
   2. Dynamic groups will automatically update themselves with devices (existing or new) that meet certain criteria, such as Vendor, OS, etc. You can also add exemptions.
5. Add the policies you want the group to be subjected to (you can select multiple).
6. Review the information and click Create.

For more information on policy management, device groups, device actions, and other features within Deel MDM powered by JumpCloud, check out the Guide to Deel On-Platform MDM.

Frequently Asked Questions

[ACCORDION] Can I use my own existing JumpCloud account? 

Yes. You can use your own JumpCloud API key to connect an existing account.

[ACCORDION] What happens when the trial ends? 

Once the 30-day window closes, the trial expires, and you will see a notification that the contract has ended. You will no longer be able to manage devices via the trial tab unless you upgrade. Someone from our team will reach out to you, or, you can reach out to us any time if you have questions or wish to upgrade the plan

[ACCORDION] Will Deel staff connect the JumpCloud instance to the platform on my behalf? 

Not for the trial version. You will find the instructions on how to do so in the platform and the email we sent you, or, alternatively, by following the steps outlined in our JumpCloud Integration guide.

[ACCORDION] If I buy a plan later, do I lose my work? 

No. If you decide to upgrade, we can extend your existing contract or create a new one to restore access to your account.

[ACCORDION] Can I try multiple MDM providers? 

Currently, the trial experience is exclusive to our JumpCloud integration.

[ACCORDION] What happens to my organizational data after the trial ends? 

When the trial ends, someone from our team will get in touch with you where this topic can be discussed. Data can be deleted upon request.

[ACCORDION] Can I automate MDM actions with HR lifecycle events?

Yes. You can trigger, for example, automatic Device Locks or Wipes (actions) once a worker leaves the organization (trigger). This can be done in the AI Workforce section of the Deel platform, and MDM actions will appear when creating a workflow if you have the MDM trial (or full version) enabled.

[/ACCORDION]