What is a Skie enrolment token?
An enrolment token is a single-use credential that binds one device to one student in one group. The dashboard creates it for each provisioning run and the command or Provision app fetches it automatically. Once a device has used it, it cannot be used again, so a copied command cannot enrol a second device.
When an administrator starts provisioning, Skie creates an enrolment token. It records three things: which student the device is for, which group that student belongs to, and which organisation is paying for the seat. When the device runs the provisioning step, it presents the token and Skie links the device to that student and group.
The token works once. It is not a shared password for the whole school. That matters in two ways. First, a token that leaks in a screenshot or a chat message cannot be used to enrol a different device after the first one has used it. Second, it keeps the rule of one device per student: the same student cannot hold two seats through the same token.
You do not type the token. In the laptop route the pasted command carries it. In the Provision app route the app fetches it from your signed-in session. Either way the model and licence checks run first, so a device that does not fit the group or a school without free seats stops before anything is installed.
Skie does not publish how long a token stays valid, and you should not plan around a particular number. Treat each token as belonging to the next device you provision and use it soon.
Practical tip: create the student and group first, then provision, so the token is made for the right place. If something goes wrong, see what to do if a token fails.
- One token, one device
- One device is for one student in one group
- Fetched automatically by the command or the app
- A used token cannot enrol another device