

If you enable federated authentication, which consists of linking Apple Business Manager with Azure AD, you don't have to create and provide unique Apple IDs to each user. Create Managed Apple IDs for device users (Opens Apple Support website)Īdditionally, review the following information:Īpple User Enrollment requires you to create and provide managed Apple IDs to enrolling users.Set mobile device management (MDM) authority.Before beginning setup, complete the following tasks: User enrollment with Company Portal is supported on devices running iOS version 13 or later, and iPadOS version 13.1 or later. This article describes how to set up an enrollment profile in the Microsoft Intune admin center for Apple User Enrollment with Company Portal. From there, they're redirected to Safari and the device settings app, where they download and install the enrollment profile. The device user authenticates and initiates enrollment by signing into the Intune Company Portal app. When the device owner attempts to sign into an app with their work or school account, Intune prompts them to enroll their device and provides instructions for next steps. This Apple User Enrollment method gives you access to a limited but appropriate set of device management settings and actions, so you can protect work data without affecting the device user's personal data or apps.

Set up user enrollment with Company Portal for iOS/iPadOS personal devices enrolling in Microsoft Intune.
