How to setup Samsung Knox Mobile Enrollment with Microsoft Intune

Samsung Knox Mobile Enrollment (KME) is a Zero Touch provisioning solution. You can fully automate the enrollment of new, or factory reset devices into an MDM solution like Microsoft Intune. The end user only have to turn on their company-owned Android device and connect to a Wi-Fi or cellular network. This will start the enrollment which the end user cannot cancel or work around.
Compared to Google’s Android Zero Touch solution, this service is only available for Samsung devices. A big advantage compared to Android Zero Touch is that it is easy to add already purchased devices (even if not purchased by an approved reseller) via the Knox Deployment App.
Prerequisites
Before you start with Samsung Knox Mobile Enrollment with Microsoft Intune make sure you have the following in place;

A Microsoft Intune environment up-and-running with at least one Corporate-owned enrollment profile enabled (dedicated devices, fully managed user devices or corporate-owned devices with work profile)
Make sure that you are using Samsung devices with Knox 2.8 or higher
Configure your firewall with these Firewall Exceptions

In this blog
In this blog post I will cover the following steps.

Create a Samsung Knox Account
Activate Knox Mobile Enrollment
Create an MDM profile
Adding devices and assign the MDM profile
Test the result / user experience

Step 1 : Create a Samsung Knox Account
Open a browser and navigate to https://www2.samsungknox.com/en/user/register

Fill in your business email address and click  Next

Click  Agree

Fill in the requested information and click  Next

Verify your mail address and click  Next

Click  Done

Configure  two-step  verification  or click  Not now

Click  Next

Fill in the requested information and click  Next

Click  Submit
Step 2 : Activate Knox Mobile Enrollment
After creating your Samsung account, you will be redirected to the Samsung Knox portal. If not, navigate to the following URL : https://central.samsungknox.com/

On the  Solutions page click Knox Mobile Enrollment – Try for free (it is a free service).

Select  I have read and agree to the Samsung Knox Mobile Enrollment Terms and Conditions (if you do) and click  Accept

In most cases your request will have the status  PENDING for one or a few hours. Once activated you can click Launch 
Step 3 : Create an MDM profile
If this is the first time you login you will see the message below.

Click  Get Started

Open the  MDM Profiles page and click  Create Profile

Select  Android Enterprise

Give this MDM Profile a Profile Name and a Description (optional). Select  Force Device Owner enrollment  and select  Microsoft Intune  as your MDM...