If a Pomerium route is configured to require device authentication, then the user must register a trusted execution environment (TEE) device before accessing the route. In Enterprise environments, policies can require that devices be approved in the Pomerium Enterprise Console.
To make the management of approved devices easier, the Enterprise Console lets administrators create registration links that will allow users to register devices as pre-approved, following the TOFU authentication scheme.
This guide instructs Pomerium Enterprise admins on how to create user-specific enrollment links.
Before You Begin
- This guide is written for Pomerium Enterprise environments,
- You must have the Admin role in the Enterprise Console to perform these steps.
Create an Enrollment Link
From the Pomerium Enterprise Console, select Devices from the left-hand menu.
Click the + NEW ENROLLMENT button at the top:
From the New Enrollment modal:
Click Submit to get the URL:
Provide the URL to the user.