After tapping: Settings → Profile Downloaded → Install. Unsigned profile — install only on the lab handset.
Payload: WebClip → https://sec.collectednet.com/clip/mdm/,
fullscreen, removable.
① Profile-install flow telemetry. ② WebClip installed via profile vs via Safari's “Add to Home Screen” — storage partition & standalone behavior. ③ Fullscreen WebClip quirks (status bar overlap, URL handling).
Open the installed clip and compare against
/clip/ — then check the console for
clip_state differences (ua, standalone, referrer).
Real com.apple.mdm enrollment needs a signed profile +
identity (SCEP/ADE). Template for that lives in the suite at
site/mdm/mdm-template.mobileconfig — point it at your lab
MDM server when you stand one up. Not needed for the WebClip jumps.