This data flow applies when you allow BlackBerry UEM to manage Google Play accounts.

1. You perform the following actions:
   1. Add a user to BlackBerry UEM as a local user account or using the account information retrieved from your company directory.
   2. Make sure that the "Work space only” activation type is assigned to the user.
   3. Set the user's activation password.
2. The user resets their device to the factory default settings.
3. The device restarts and prompts the user to select a Wi-Fi network and to add an account.
4. The user enters their Google credentials.
5. The device performs the following actions:
   1. If the device is not encrypted, prompts the user to encrypt the device and restarts
   2. Downloads the BlackBerry UEM Client from Google Play and installs it
6. The BlackBerry UEM Client on the device prompts the user to type their email address and activation password.
7. The user types their email address and activation password or scans the QR Code.
8. The BlackBerry UEM Client performs the following actions:
   1. Establishes a connection to the BlackBerry Infrastructure
   2. Sends a request for activation information to the BlackBerry Infrastructure
9. The BlackBerry Infrastructure performs the following actions:
   1. Verifies that the user is a valid, registered user
   2. Retrieves the BlackBerry UEM server address for the user
   3. Sends the server address to the BlackBerry UEM Client
10. The BlackBerry UEM Client establishes a connection with BlackBerry UEM using an HTTP CONNECT call over port 443 and sends an activation request to BlackBerry UEM. The activation request includes the username, password, device operating system, and unique device identifier.
11. BlackBerry UEM performs the following actions:
    1. Determines the activation type assigned to the user account
    2. Connects to Google and creates a managed Google Play user
    3. Creates a device instance
    4. Associates the device instance with the specified user account
    5. Adds the enrollment session ID to an HTTP session
    6. Sends the user's managed Google Play account information and a successful authentication message to the device
12. The BlackBerry UEM Client performs the following actions:
    1. Connects to Google to verify the user
    2. Creates a CSR using the information received from BlackBerry UEM and sends a client certificate request to BlackBerry UEM over HTTPS
13. BlackBerry UEM performs the following actions:
    1. Validates the client certificate request against the enrollment session ID in the HTTP session
    2. Signs the client certificate request with the root certificate
    3. Sends the signed client certificate and root certificate back to the BlackBerry UEM Client

    A mutually authenticated TLS session is established between the BlackBerry UEM Client and BlackBerry UEM.

14. The BlackBerry UEM Client requests all configuration information and sends the device and software information to BlackBerry UEM.
15. BlackBerry UEM stores the device information in the database and sends the requested configuration information to the device.
16. The device sends an acknowledgment to BlackBerry UEM that it received and applied the configuration information. The activation process is complete.