Management service migration for managed devices

A computer-implemented method, comprising:

• identifying, by a migration service, a request to migrate a client device from a first management service to a second management service, the request comprising a device identifier associated with the client device, wherein an enterprise managing the client device utilizes the migration service to change management services from the first management service to the second management service;
• transmitting, from the migration service to the first management service, an un-enrollment request that invokes an un-enrollment Application Programming Interface (API) of the first management service to un-enroll the client device from the first management service, the un-enrollment request comprising the device identifier, an identity of the enterprise managing the client device, and administrator credentials for the enterprise, wherein the administrator credentials authenticate with the un-enrollment API of the first management service;
• obtaining, by the migration service, enrollment data from the second management service, the enrollment data comprising an enrollment token that authenticates the client device for enrollment with the second management service;
• and
• transmitting, from the migration service to a migration application installed on the client device, instructions that cause the client device to authenticate the client device for enrollment with the second management service using the enrollment token.

A non-transitory computer-readable medium embodying program instructions executable in at least one computing device that, when executed, cause the at least one computing device to at least:

• identify, by a migration service, a request to migrate a client device from a first management service to a second management service, the request comprising a device identifier associated with the client device, wherein an enterprise managing the client device utilizes the migration service to change management services from the first management service to the second management service;
• transmit, from the migration service to the first management service, an un-enrollment request that invokes an un-enrollment Application Programming Interface (API) of the first management service to un-enroll the client device from the first management service, the un-enrollment request comprising the device identifier, an identity of the enterprise managing the client device, and administrator credentials for the enterprise, wherein the administrator credentials authenticate with the un-enrollment API of the first management service;
• obtain, by the migration service, enrollment data from the second management service, the enrollment data comprising an enrollment token that authenticates the client device for enrollment with the second management service;
• and
• transmit, from the migration service to a migration application installed on the client device, instructions that cause the client device to authenticate the client device for enrollment with the second management service using the enrollment token.