MDM deployment

Organizations can deploy WARP automatically to their fleet of devices in a single operation. The WARP client is compatible with the vast majority of managed deployment workflows, including mobility management solutions such as Intune or JAMF, or by executing an .msi file on desktop machines.

MDM policy file

Refer to our managed deployment instructions and create a .plist, mdm.xml, or .msi policy file based on your organization’s software management tool.

MDM parameters that you specify in a local policy file will overrule any WARP settings configured in the dashboard.

Therefore, we recommend that your policy file only contain the organization name and potentially the onboarding flag, relying on the dashboard to configure the remaining device settings.

<dict>
  <key>organization</key>
  <string>your-team-name</string>
  <key>onboarding</key>
  <false/>
</dict>

1. On your Account Home in the Cloudflare dashboard ↗, select the Zero Trust icon.

2. On the onboarding screen, choose a team name. The team name is a unique, internal identifier for your Zero Trust organization. Users will enter this team name when they enroll their device manually, and it will be the subdomain for your App Launcher (as relevant). Your business name is the typical entry.

3. Complete your onboarding by selecting a subscription plan and entering your payment details. If you chose the Zero Trust Free plan, this step is still needed but you will not be charged.