In my company, we would use the Apple MDM software linked to Active Directory. We would use the self enrollment system of iOS devices proposed by OS X Lion Server. The main problem is that to log-on, the user must input their password on the (/MyDevices web app). But our users don't know their password, because we use a biometric system for the logon on our windows machine.
Is there a way to logon with a PIN number sent by e-mail? Do you have any advices?