Skip to Content
Endpoint Controls

Install Endpoint Control

Enroll a device.

If you don't see this feature in your console, ask your SecureAuth contact to enable the device_sensor feature flag for your organization.

Endpoint Control runs on each machine as a small device sensor, and until a machine runs it, agents on that machine stay out of your view. Enrolling a device gives it a sensor installer tied to its owner.

Enroll a device for someone

  1. On Setup › Devices, select Enroll device.
  2. Choose an Owner, a user with an email address, and a Platform.
  3. Select Generate installer.
  4. Send the download to the owner, with the command the dialog shows.

The download is the only copy, and the credential inside it can't be shown again. The owner must run it before the time the dialog shows, or you generate a new one. Download again saves another copy of the same installer while the dialog is open. Enrolling for someone needs enroll_devices for all users.

Enroll your own machine

In the user portal, Devices offers Enroll this machine, which detects your platform from the browser. It needs enroll_devices for your own devices and the device_self_enrollment feature flag.

After the sensor's first sync, Devices shows the device's OS.

On this page