![]() Apps like the Company Portal app don't work. Use this option for devices that perform tasks without accessing local user data. Apple School Manager's Shared iPad mode requires user enroll without user affinity.Įnroll without User Affinity - Choose this option for devices unaffiliated with a single user, such as a shared device. If using ADFS, user affinity requires WS-Trust 1.3 Username/Mixed endpoint. ![]() This option also lets users authenticate their devices by using the company portal. Learn more about Azure Active Directory dynamic groups.įor User Affinity, choose whether devices with this profile must enroll with or without an assigned user.Įnroll with User Affinity - Choose this option for devices that belong to users and that want to use the company portal for services like installing apps. Use the profile name to define the enrollmentProfileName parameter to assign devices with this enrollment profile. You can use this Name field to create a dynamic group in Azure Active Directory. Under Create Profile, enter a Name and Description for the profile for administrative purposes. Select a token, choose Profiles, and then choose Create profile. In the Microsoft Intune admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Enrollment program tokens. A device enrollment profile defines the settings applied to a group of devices during enrollment. Now that you've installed your token, you can create an enrollment profile for Apple School devices. Intune automatically synchronizes your Apple School Manager devices from Apple. With the push certificate, Intune can enroll and manage iOS/iPadOS devices by pushing policy to enrolled mobile devices. In the Apple token box, browse to the certificate (.pem) file, choose Open, and then choose Create. Return to the admin center and enter the Apple ID. Save the Apple ID used to create this token Specify how to Choose Devices, then provide device information and details.Ĭhoose Assign to Server and choose the specified for Microsoft Intune, and then choose OK. Go to Device Assignments, and Choose Device by manual entry of Serial Numbers, Order Number, or Upload CSV File.Ĭhoose the action Assign to Server, and choose the MDM Server you created. pem file, and choose Save MDM Server (lower right).Ĭhoose Get Token and then download the server token (.p7m) file to your computer. It isn't the name or URL of the Microsoft Intune server.Ĭhoose Upload File. The server name is for your reference to identify the mobile device management (MDM) server. In the Apple School Manager portal, go to MDM Servers, and then choose Add MDM Server (upper right).Įnter the MDM Server Name. You can use this Apple ID to renew your Apple School Manager token. Download a token and assign devicesĬhoose Create a token via Apple School Manager, and sign in to Apple School with your company Apple ID. pem file is used to request a trust-relationship certificate from the Apple School Manager portal. In the Enrollment program token blade, choose Download your public key to download and save the encryption key (.pem) file locally. In the Microsoft Intune admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Enrollment Program Tokens > Add. Download the Intune public key certificate required to create an Apple token While you are in the Apple portal, you can also assign device serial numbers to manage. It also permits Intune to perform enrollment profile uploads to Apple and to assign devices to those profiles. This token lets Intune sync information about Apple School Manager-participating devices. Devices purchased from the Apple School Management programīefore you can enroll corporate-owned iOS/iPadOS devices with Apple School Manager, you need a token (.p7m) file from Apple.If using ADFS, user affinity requires WS-Trust 1.3 Username/Mixed endpoint.Apple Mobile Device Management (MDM) Push certificate.You create Automated Device Enrollment (ADE) enrollment profiles containing settings that applied to devices during enrollment.Īpple School Manager enrollment can't be used with the device enrollment manager. A list of serial numbers or a purchase order number is required so you can assign devices to Intune for management. To enable Apple School Manager enrollment, you use both the Intune and Apple School Manager portals. When a student or teacher turns on the device, Setup Assistant runs with preconfigured settings and the device enrolls into management. Using Intune with Apple School Manager, you can enroll large numbers of iOS/iPadOS devices without ever touching them. You can set up Intune to enroll iOS/iPadOS devices purchased through the Apple School Manager program.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |