Skip to main content
Cisco Meraki

Enrollment and Self-Service Portals for Systems Manager


Systems Manager has two portals for end users to access:

  1. Self Service Portal (
  2. Enrollment Portal (

The Self Service Portal allows end users to view/managed their SM enrolled devices and add/remove/edit their Trusted Access devices. More information on the SSP specifically here

The Enrollment Portal allows end users to enroll their device into Systems Manager. More information on enrollment specifically here


End users can authentication against Meraki Owners, Active Directory, Azure AD, Open ID, Google OAuth, SAML, and more. For information and seteps on how to setup the various end user authentication options please view the SM authentication documentation

Custom Branding 

Setup custom branding in Network-Wide > Configure > General for combined networks. For SM only networks, setup custom branding in Systems Manager > Configure > General.

Enable the Self Service Branding, and then upload your Logo, add Logo alternative text, and set the Brand Color hex. 

Screen Shot 2022-02-16 at 11.10.20 AM.png

Now when end users access the Self Service Portal and Enrollment Portal, they will see this custom branding. 

Screen Shot 2022-02-16 at 12.20.17 PM.png

Network Enrollment String

A network enrollment string allows end users to access their organization’s enrollment portal ( or self-service portal ( using a known and recognizable network identifier. Network enrollment strings are unique to each Systems Manager network and can be used as a substitute for the randomly-generated 10-digit network ID. 


Screen Shot 2022-02-16 at 10.09.44 AM.png

Network enrollment strings are case insensitive and must follow these guidelines:

  • Must be 4 or more characters in length
  • Cannot exceed 50 characters in length
  • Cannot include any of the following characters: ;:@=&$!‘“,?.(){}[]\*+/#<>|^%
  • Cannot be a 10 digit string
  • Cannot follow the format XXX-XXX-XXXX where X represents a digit

Configure a Network Enrollment String

  1. Navigate to Network-wide > Configure > General

  2. Enter the desired string into the “Network enrollment string” field



  1. Click Save in the bottom right corner to save changes.

If Systems Manager is a part of a combined network, then "-sm" is automatically appended to the end of the network enrollment string.

Change a Network Enrollment String

  1. Navigate to Network-wide > Configure > General

  2. Change the desired string in the “Network enrollment string” field

  3. Click Save in the bottom right corner to save changes.

Changing a network enrollment string may cause existing bookmarks or links to break.  Please be sure to review all internal documentation and references before editing a network enrollment string to prevent adverse impact to existing workflows.

Once enabled, a network enrollment strings can be changed but they cannot be deleted.