This integration guide is focused on configuring the Apple Device Enrollment Program using Apple Business Manager within Addigy.

Please review the article in full to understand all of the requirements, configuration steps, and statuses.


Requirements

The following requirements are needed to proceed with the Automated Device Enrollment Integration within Addigy using Apple Business Manager:

  1. Apple Business Manager account (business.apple.com)
  2. Devices tied to your Apple Business Manager account
  3. Administrator access in Apple Business Manager
  4. Owner access in Addigy
  5. An MDM Profile is created and defined in Policies > Integrations > Mobile Device Management (MDM) Integration (Creating an Apple Push Certificate)


Enable the Addigy Automated Device Enrollment Integration

Addigy provides each organization with the ability to associate multiple Automated Device Enrollment accounts across different policies. 

To enable Automated Device Enrollment within your organization, an Owner account will need to enable the integration from the Support -> Integrations page.



Now, each policy within your organization will be able to integrate with a separate Automated Device Enrollment account. To associate an Automated Device Enrollment account with a policy navigate to the policy in the Policies page, and click on Integrations in the policy drop-down tree.



Then, follow the instructions available within the Automated Device Enrollment section.   


Configuring the Device Enrollment Program Automated Device Enrollment Integration

Completing the two requirements below involves leveraging your Apple Business Manager Program platform.



If you are using Apple Business Manager, navigate to Settings -> Device Management Settings and select Add MDM Server.







Now, your Automated Device Enrollment devices will install Addigy via MDM during their initial enrollment. 

If the device has already gone through the Automated Device Enrollment enrollment process and you would like to redo enrollment, then see our article Resetting the Automated Device Enrollment Status of a Device.


As soon as your Apple Automated Device Enrollment account is linked to the policy, your Automated Device Enrollment enrolled devices will appear in the table below the setup. Here are the possible statuses for each device.


Automated Device Enrollment Profile Status:

1) assigned

2) empty

3) pushed

4) removed


Automated Device Enrollment Profile Assign Status:

1) success - assigned profile

2) not accessible - the serial number not accessible

3) failed - not assigned profile "unexpected reason"


Creating an Automated Device Enrollment Profile: (*REQUIRED*)


You must set up an Automated Device Enrollment Profile for the integration to be considered complete and start managing devices.

Enter all the unique and corresponding information to your company that you would like to be reflected on Automated Device Enrollment Enrolled devices during enrollment and thereafter.

Each task will control the enrollment behavior accordingly below and may vary uniquely for each Operating System (e.g. macOS, tvOS, iOS).




Once the Automated Device Enrollment Profile is saved new devices will inherit this Profile configuration.

If devices are already enrolled in Automated Device Enrollment, they would need to be re-enrolled to inherit the new profile settings in which case see the article Resetting the Automated Device Enrollment Status of a Device.


You can see the status of Automated Device Enrollment enrolled devices in Addigy after the Profile Settings in the Automated Device Enrollment Devices area.

Underneath you can view the grid of devices and their Profile status:




You can validate devices are enrolled in this process when they are powered on for the first time and they reach the enrollment screen or the Profile is visible in System Preferences.