Android devices that have Google Mobile Services (GMS) can be provisioned to Esper using the EMM token method (also known as Android for Work or AFW) provisioning method. Screens and flows vary across Android versions.
This article is for the provisioning method known as EMM Token or AFW provisioning. Refer to the EMM enrollment article for setting up Google Play.
As of December 2025, we now support Android 14 and 15 EMM Token Provisioning.
Requirements:
- A GMS device
Notes:
- EMM token support was first delivered in Android 6.0. On some Android versions, primarily Android 9 and above, some of these screens may not appear at all. If you have any questions or issues with Android Enterprise-based provisioning, submit a ticket.
- Device makers and carriers customize the setup process. You’ll likely encounter unique setup screens specific to your device. Generally, you can either skip or decline most of the options. There are a handful of system-specific notifications listed in the steps below, for which you’ll need to make the proper selections.
- Ensure that automatic updates are enabled in the Esper Software Updates prior to provisioning.
Blueprints 2.0
Before provisioning a device, you may want to create a blueprint based on your desired device settings. Learn more about Creating a Blueprint.
Step 1: Register the devices
Whether or not your device has a camera, you can make use of seamless provisioning to automatically register devices before provisioning. Seamless will save you time and allow you to skip QR-code provisioning.
If you'd still like to provision a device without completing this step, you will need to do step 11a (Camera step) of this guide.
To register devices go to the Esper Console and click on Provisioning Methods.
In Provisioning Methods, go to Seamless Provisioning. Add the device's seerial number or IMEI. You may also upload bulk serial number information.
Step 2: Factory reset the device.
Step 3: Once the factory reset is completed, on the first screen, click on the START button.
Step 4: If your device does not have an active cellular data network connection, you will need to connect the device to the internet using cellular or Wi-Fi.
If you have a cellular device without a SIM, you may encounter the below screen first. Select SKIP if you plan to use Wi-Fi. Otherwise, proceed to insert your SIM with cellular data support.
Step 5: When presented with the ‘Copy apps & data’ screen, select ‘Set up as new’. This text may be ‘Don’t Copy’ or another variant.
Step 6: If you are using Wi-Fi, then complete the steps to connect to your desired access point.
Step 7: You will see a ‘Checking for updates’… screen that may change to ‘Just a sec… ‘and/or ‘Checking info….’. Please be patient as the device is preparing for enrollment.
Step 8: In the email or phone field, enter afw#esper and then select Next. As a certified Google EMM partner, this is a particular keyword used by the EMM token provisioning process that will then start the process of enrolling your device into Esper.
Step 9: You will need to give permission to install the Esper agent on your device to begin the enrollment process. Select INSTALL.
Step 10: The Esper agent will be downloaded to your device.
Step 11: A screen may display asking you to accept specific terms from Google regarding Esper managing your device. Click or touch 'ACCEPT & CONTINUE.'
The Esper agent will now start the installation, and a series of screens will display as Esper prepares for enrollment.
Step 11a (Camera step):
If you provisioned devices seamlessly in Step 1, you may skip to step 12 of this guide.
If you did not complete Step 1 of this guide, you will need to provision devices with a QR code. This method will only work for devices with cameras. In the Provisioning Methods screen in the Esper Console, choose Android for Work from the Select Provisioning Method dropdown.
Then select the Blueprints tab and the provisioning blueprint.
Optionally, select a provisioning group. You can select the All Devices group if you have no preference.
The following settings are not applicable to AEP: Select Provisioning Wi-Fi and Device Language.
The QR code scanner should appear on your device. Hold the device’s camera to your computer screen, centering it on the QR code.
Notes: The QR code is densely populated. If your device’s camera has trouble scanning it, use the following tips:
- Increasing the brightness of your computer screen
- Changing the distance between the camera and the screen - move your device closer or farther from the QR code
- Hold the device still for a few seconds once you have adjusted the distance
Step 12:
If your device has a camera, provisioning will begin after the QR code is scanned.
If your device does not have a camera and was registered via seamless provisioning (see step 1), provisioning will begin automatically.
Notes:
-
If you wish to exit the provisioning process for any reason, click on the Esper logo 6 times to bring up the option to factory reset the device.
-
If your template or blueprint enables Google Play, Google Play Services will be updated. Be aware that this is done by Google and depends on their current quality of service.
Typically (but not always), you will resolve the permission and allow Esper to modify System settings. Click on RESOLVE to open up the Android System settings application to provide consent.
Step 13: A list of applications will be displayed on the 'Can modify system settings’ screen.
You will then be taken to ‘Modify system settings’ for Esper Device Management. Turn ON the toggle switch located on the right side of the screen to Allow modify system settings.
Step 14: Next, click the Back button in the upper left-hand corner of the screen.
Step 15: You will now be taken back to the 'Can modify system settings' screen. You can verify that Esper Device Management is now set to 'Yes' or 'Allowed' for modifying system settings. Now click the back button in the Navigation bar.
Step 16: You will now return to the Esper agent. You will typically need to grant another permission to allow Esper to draw over other applications. This is done to ensure a smooth experience for kiosk-mode applications. Click on RESOLVE to open the Android system settings application to provide permissions.
Step 17: On the 'Display Over Other Apps' or 'Draw Over Other Apps' screen, you will see a list of apps that have been granted or are requesting permission to display over other applications.
Click on Esper Device Management.
Step 18: You will then be taken to ‘Display Over Other Apps’ or ‘Draw Over Other Apps’ for Esper Device Management. Click on the toggle switch located on the right side of the screen to ‘Allow display over other apps’ or ‘Permit Drawing Over Other Apps’.
Step 19: Next, click on the back button in the upper left-hand corner of the screen.
Step 20: You will return to the 'Display Over Other Apps' screen. Esper Device Management is now set to 'Yes' or 'Allowed' for drawing over other apps. Next, click on the back button in the Navigation bar.
Step 21: You will return to the Esper agent to install any Esper Enterprise applications.
Now provisioning is complete. Your device is set up according to your provisioning template. In this example, we’ve provisioned in multi-application mode with three Enterprise applications installed from the Esper Cloud and managed Google Play enabled.
On the Provisioning Methods screen, if you select Android for Work, you will be taken step-by-step through instructions using the EMM token provisioning process. You may follow through with these steps by clicking Next.
Please have your Provisioning Template created so you can access the QR code to provision your device.
Step 1: Begin by factory resetting your device.
Step 2: Once the factory reset is completed, on the first screen, click on the START button.
Step 3: If your device does not have an active cellular data network connection, you will need to connect the device to the internet using cellular or Wi-Fi.
If you have a cellular device without a SIM, you may encounter the below screen first. Select SKIP if you plan to use Wi-Fi. Otherwise, proceed to insert your SIM with cellular data support.
Step 4: When presented with the ‘Copy apps & data’ screen, select ‘Set up as new’. This text may be ‘Don’t Copy’ or another variant.
Step 5: If you are using Wi-Fi, then complete the steps to connect to your desired access point.
Step 6: You will see a ‘Checking for updates’… screen that may change to ‘Just a sec… ‘and/or ‘Checking info….’. Please be patient as the device is preparing for enrollment.
Step 7: In the email or phone field, enter afw#esper and then select Next. As a certified Google EMM partner, this is a particular keyword used by the Android Enterprise provisioning process that will then start the process of enrolling your device into Esper.
Step 8: You will need to give permission to install the Esper agent on your device to begin the enrollment process. Select INSTALL.
Step 9: The Esper agent will be downloaded to your device. Please be patient.
Step 10: A screen may display asking you to accept specific terms from Google regarding Esper managing your device. Click or touch 'ACCEPT & CONTINUE.'
The Esper agent will now start the installation, and a series of screens will display as Esper prepares for enrollment.
Step 11: Go to the Esper Console and click on Provisioning Templates in the left menu bar. Find the template you want to use, and click on the View QR code. The QR code for the template will appear on your screen.
Step 12: The QR code scanner should appear on your device. Hold the device’s camera to your computer screen, centering it on the QR code.
Notes: The QR code is densely populated. If your device’s camera has trouble scanning it, use the following tips:
- Increasing the brightness of your computer's screen
- Changing the distance between the camera and the screen - move your device closer or farther from the QR code
- Hold the device still for a few seconds once you have adjusted the distance
Step 13: Once Esper has successfully read the QR code, provisioning will start.
Notes:
-
If you wish to exit the provisioning process for any reason, click on the Esper logo 6 times to bring up the option to factory reset the device.
-
If your Provisioning Template enables Google Play, Google Play Services will be updated. Be aware that this is done by Google and depends on their current quality of service.
Typically (but not always), you need to resolve the permission and allow Esper to modify System settings. Click on RESOLVE to open up the Android System settings application to provide consent.
Step 14: On the 'Can modify system settings’ screen and a list of Applications will be displayed.
You will then be taken to ‘Modify system settings’ for Esper Device Management. Turn ON the toggle to allow modification for system settings.
Step 15: Next, click the Back button in the upper left-hand corner of the screen.
Step 16: You will now be taken back to the 'Can modify system settings' screen. You can verify that Esper Device Management is now set to 'Yes' or 'Allowed' for system setting modification. Now click the back button in the navigation bar.
Step 17: You will now return to the Esper agent. You will typically need to grant another permission to allow Esper to draw over other applications. This is done to ensure a smooth experience for kiosk-mode applications. Click on RESOLVE to open the Android system settings application and provide permission.
Step 18: On the 'Display Over Other Apps' or 'Draw Over Other Apps' screen, you will see a list of apps that have been granted or are requesting permission to display over other applications.
Click on Esper Device Management.
Step 19: You will then be taken to ‘Display Over Other Apps’ or ‘Draw Over Other Apps’ for Esper Device Management. Click on the toggle switch to ‘Allow display over other apps’ or ‘Permit Drawing Over Other Apps’.
Step 20: Next, click on the back button in the upper left-hand corner of the screen.
Step 21: You'll be taken to the 'Display Over Other Apps' screen. Esper Device Management is now set to 'Yes' or 'Allowed' to draw over other apps. Next, click on the back button in the Navigation bar.
Step 22: You will return to the Esper agent to install any Esper Enterprise applications.
Provisioning is complete, and your device is set up according to your provisioning template. In this example, we’ve provisioned in multi-application mode with three Enterprise applications installed from the Esper Cloud and managed Google Play enabled.