With Addigy Identity and Automated Device Enrollment, it is possible to skip primary account creation during Setup Assistant so end user's local accounts are created by Addigy Identity via just-in-time user creation. This workflow will prevent end users from creating an admin user via Setup Assistant.
Requirements
- Policy with both Addigy Identity and Automated Device Enrollment configured.
- Note: Both features must be configured in the same policy for just-in-time user creation to function.
- Device assigned to the MDM server in Apple Business Manager that is configured in the policy.
- MacOS device that meets Addigy's System Requirements.
Automated Device Enrollment Settings
- Navigate to the policy where you have Automated Device Enrollment configured.
- In the Automated Device Enrollment settings enable await device configuration before completing Setup Assistant and configure user accounts.
- Enable skip user account during Setup Assistant.
- Configure the ADE Account (admin) and enable hide ADE account from other device users.
- Click Save Settings.
Addigy Identity Settings
-
Navigate to the policy's Addigy Identity configuration and enable Block Setup Assistant during configuration.
-
Click Save Changes.
Note: By default Addigy Identity will create local users as standard users. If you want end user account to be administrators on the device enable create users as administrators within Addigy Identity's optional settings.
With these settings in place the end user will go through Setup Assistant as normal but not be asked to create a local account. After Setup Assistant completes Addigy Identity will launch and the end user will sign into their identity provider account. Once successfully signed in Addigy Identity will create their local user.