Skip to content
Book a demo
How it works

How Purple MDM takes a device from the box to the network

A device is switched on, claims itself, receives the settings, apps and certificates its group needs, and is checked before it joins the network. One console renders every setting to each platform, every change is previewed, and the Purple agent keeps devices in their desired state.

Book a demoTalk to sales

See everything Purple MDM does

DevicesAll groups · todayLive
  • MacBook Air · C02XY…Staff MacsEnrolled · supervised
  • iPad · DMPZ…Frontline iPadsConfigured · apps installed
  • OFFICE-PC-041Office PCsFixing · BitLocker switching on
  • Chromebook · 5CD1…Year 7 ChromebooksCompliant · certificate issued
  • Pixel · work profileField phonesFlagged · update past deadline
  • ubuntu-build-02LinuxCompliant · encrypted
  • MacBook Pro · FVFG…Staff MacsFixing · certificate renewed
  • iPhone · personalWork areaEnrolled · transparency page shown
Zero-touch
from the box
Previewed
every change
Plain English
every verdict
A failing device moved to a safe network. Fix sent.
Book a demo

From the box to the network

Zero-touch enrolment, step by step

A device is switched on

A Mac or iPad bought through Apple Business Manager, a Windows PC with a provisioning package or an Entra ID join, an Android phone with a QR code, or a Chromebook on a school's Google Admin. Nobody has touched it yet.

Purple MDM claims it

The device enrols under your organisation and lands in the right group from its facts: platform, model, who it is for. Apple devices arrive supervised; Windows devices hold at the Enrollment Status Page until setup is done.

It is configured

The settings library renders your group's settings the way the platform expects: Apple declarations, Windows configuration, Android policy or Chrome policy. Apps install, the WiFi certificate is issued, and encryption switches on with its key stored.

It is checked and let on the network

Compliance checks run: encryption, OS version, passcode, patch status, certificate health. A healthy device joins the network; with Purple Access, a failing one is moved to a safe network until its fix lands.

One console

One settings library, rendered to every platform

Restrictions, WiFi, wired network, VPN, email, certificates, login window and browser settings are forms, not hand-written profiles. Each is defined once and rendered to each platform the way that platform expects.

  • AppleApple MDM and declarative management on macOS, iPhone and iPad, plus the Purple agent on the Mac.
  • Windows 11Windows MDM and declarative configuration, plus the Purple agent.
  • Android and ChromeOSAndroid Enterprise through Google's Android Management API, and Chromebooks through Google's own Chrome management APIs.
  • LinuxUbuntu and RHEL through the Purple agent: disk encryption and update checks, scripts, patching and WiFi certificates.

See every platform

Every change

Preview, stage, undo

Every change shows which devices it would affect and which would fall out of compliance before it is saved. It rolls out to a test group first, and any earlier version can be restored.

  • Preview the impactWhich devices a change would reach, and which would fall out of compliance, before you save it.
  • Stage to a test groupRoll out to a small group first, then to the fleet.
  • Restore any versionEvery earlier configuration is kept; whole configurations can be exported and imported.

See everything Purple MDM does

The Purple agent

One small, signed agent that keeps devices in their desired state

On Mac, Windows and Linux the Purple agent holds an always-on connection, reports changes the moment they happen and runs scripts. If someone removes a setting, the device puts it back, even offline.

  • Self-correcting settingsDrift is detected and corrected on the device, with or without a connection.
  • Changes reported instantlyNo waiting for the next check-in: the agent pushes a change the moment it is made.
  • Scripts with historyOn demand or on a schedule, with output and history per device. Only admins with the scripts permission can see script contents and output.

Network access

Device health decides who gets on the network

Purple MDM is made by the company behind Purple Access, so a device's health can decide whether it joins the network, automatically and in seconds. An unhealthy device is moved to a safe network and let back once fixed, with no admin involved.

  • Health flows into Purple AccessEvery compliance verdict is available to network access control the moment it changes.
  • A safe network until fixedA failing device is moved to a safe network, the fix is sent, and it is let back automatically.
  • Certificates for WiFi and wired networksIssued automatically to every device and renewed before they expire.

See how device health decides network access

Setup

From sign-up to a managed fleet

Purple MDM is a cloud service: nothing to host. Existing Purple customers sign in with the account they already have. Four steps, and the first is a sign-in.

  1. Sign in with your Purple account

    At app.mdm.purple.ai. New customers are set up by the Purple team or their Purple partner.

  2. Connect your device programmes

    Apple Business Manager and Apps and Books, Android Enterprise, your Google Admin for Chromebooks, and your identity provider.

  3. Set your groups and baselines

    Start from a security baseline, build groups from device facts and your directory, and preview the result.

  4. Enrol, or migrate in waves

    New devices enrol themselves at first switch-on. A fleet on Jamf, Intune or JumpCloud is imported and moved over in waves, with no WiFi outage.

Talk to sales

Questions about how Purple MDM works

Ask the Purple MDM team anything else

Does Purple MDM need an agent on every device?

No. iPhones, iPads, Android devices and Chromebooks are managed without one. The small, signed Purple agent runs on Mac, Windows and Linux to do what MDM alone cannot: keep settings in their desired state offline, report changes instantly and run scripts.

How quickly does a change reach a device?

Apple and Windows devices use declarative management, so they apply a change and report back without waiting for a command queue, and the Purple agent holds an always-on connection. Changes show on the device the moment they are made.

What if I make a mistake?

Every change previews which devices it would affect and which would fall out of compliance before it is saved, rolls out to a test group first, and any earlier version can be restored in one click.

Where does Purple MDM run?

In the cloud, in your region: Europe or the United States. Everyone signs in at one address and is taken to their own region. There is nothing to host and nothing to patch on your side.

See every device in one console, on your own fleet

Tell us which devices you run, how many, and what you manage them with today. The Purple team shows you Purple MDM on a fleet like yours: zero-touch enrolment, a change previewed and undone, a failed check explained in a sentence, and a device moved off the network and back. Already a Purple customer? Sign in to the app with your Purple account.

Book a demoAlready a Purple customer? Sign in to Purple MDM
  1. We map your fleetA Purple expert maps your platforms, your groups and how devices arrive today, and answers your questions on enrolment, data regions, roles and migration.
  2. You see it on devices like yoursA demo of zero-touch enrolment, a previewed change, a failed check explained in plain English and, with Purple Access, a device moved off the network and back.
  3. You get your quotePriced per device, per month, for the platforms you run, direct or through your Purple partner, with a move in waves planned if you are coming from another MDM.

Your demo

Tell us your fleet. We show you Purple MDM running it.

A Purple expert comes back to book a demo on devices like yours, from the team behind Purple WiFi and Purple Access.