Forum Discussion

Sabita1's avatar
Sabita1
Icon for Microsoft rankMicrosoft
May 06, 2026

Endpoint DLP Device Onboarding - WorkspaceOne

Hi everyone,   We have a customer who is using WorkspaceOne for managing the Endpoints. It is an Hybrid environment. We need some guidance and documentation(if any), to help onboard devices for P...
cder's avatar
cder
MCT
May 09, 2026

You can onboard via the MDM onboarding method. The mdm deployment uses the OMA-URI setting below to push the configuration package to devices: 

OMA-URI:./Device/Vendor/MSFT/WindowsAdvancedThreatProtection/Onboarding

Date type: String

Value: [Content of the DeviceCompliance.onboarding file that is available in the downloaded DeviceComplianceOnboardingPackage.zip file]

Using WorkspaceOne you can configure a custum OMA-URI / CSP based profile for your devices.
More here : https://learn.microsoft.com/en-us/defender-endpoint/configure-endpoints-mdm

Although this article describes onboarding devices to Microsoft Defender for Endpoint, the instructions are the same for onboarding to the compliance center.

I've seen people using their third-party MDM as the deployment layer to run the “Local Script” onboarding package from Microsoft Purview. https://learn.microsoft.com/en-us/purview/device-onboarding-script#offboard-devices-using-a-local-script 

Note that the documentation recommends using the local script to deploy up to 10 devices.