Does Samsung support zero-touch?

As of late 2020, yes. Samsung devices running Android 9.0 or later support Google zero-touch enrolment alongside Samsung's own Knox Mobile Enrolment (KME) service.

Both achieve the same outcome - a device that enrols into the organisation's EMM without manual intervention at first boot. The differences are in features and scope:

Zero-touch is OEM-agnostic and managed through the zero-touch portal. For organisations with mixed-OEM fleets, it provides a single provisioning workflow across Samsung, Pixel, and other supported devices.

KME is Samsung-specific and has been available longer for Android Enterprise provisioning (since Knox 2.8). It offers additional capabilities over zero-touch, including:

• Re-enrolment persistence - if a user factory resets or uninstalls the EMM agent, KME will automatically re-initiate enrolment on the next boot
• QR code provisioning without pre-configured network access - KME QR codes can embed Wi-Fi credentials, so the device connects automatically during setup without manual network configuration. The device still needs internet connectivity to complete enrolment, but the setup step is simplified
• On-premises deployment via KME Direct for environments without internet access
• Greater setup wizard control - customisation of the provisioning UX

KME is free to use, though some optional advanced settings require a Knox Suite licence. Devices must be purchased through a KME-supported reseller to be registered in the KME portal.

For a Samsung-only fleet, KME is the more feature-rich option. For mixed-OEM fleets, zero-touch provides consistency. Both support fully managed, dedicated, and COPE deployments. Zero-touch provisions company-owned devices only - it does not support personally-owned (BYOD) work profile enrolment. KME supports work profile enrolment for both company-owned and BYOD scenarios.

For more on Samsung's broader enterprise capabilities, see Does Samsung support Android Enterprise?.