Home

Changes to MDM enrollment workflow in iOS 12

Apple has announced that there are changes coming in future versions of iOS 12 for manual enrollment into Mobile Device Management (MDM) - https://support.apple.com/en-us/HT209435. We think this change will likely come in the Spring 2019 release of iOS from Apple.

 

Enrollment into Intune currently flows as follows:

  • Login into the Company Portal app, click Begin  
  • Redirection to Company Portal website in Safari
  • Allow prompt stating “This website is trying to open Settings to show you a configuration profile”
  • Redirection to Management Profile details page
  • Select Install on the Management Profile details page and follow prompts to install profile
  • Select Done
  • Automatic Redirection to Company Portal website in Safari
  • Select “Open” on the “Open this page in Comp Portal” prompt
  • Automatic Redirection to Company Portal app to finish workflow

However, starting with iOS 12.1.1 beta, we’ve seen that enrollment has a change in workflow. Installing a management profile now involves additional steps for end users after they allow the prompt stating “This website is trying to open Settings to show you a configuration profile. After this step, here's what they'll have to do:

  • Select “Done” on “Profile Downloaded” prompt

iOS enrollment ss edited.jpg

  • Manual navigation to Profiles section of Settings app (Settings > General > Profiles) Note: This section of the Settings app may be named differently depending on profiles currently on the device. Once a Management Profile is installed, the name of the section changes to “Device Management”.
  • Select “Install Profile” on the Downloaded Management Profile

Tiffany iOS enrollment 2.PNG

  • Select “Install” on the upper right hand of the Management Profile details page and follow prompts to install profile
  • Select “Trust” on the Remote Management prompt
  • Manual navigation back to Company Portal app to finish workflow

Here is a short video of what the new flow looks like in beta versions of iOS 12:

 

 

We’re trying to make changes on the Intune side and will keep you updated so you can be prepared for this change in enrollment workflow.

5 Comments
Occasional Visitor

This is absolutely atrocious from a user interface point of view.  Its hard to believe Apple would design something like this?

Contributor

@Amit_Autar, A similar change was made by Apple in macOS High Sierra 10.13.4, with regards to user approved enrollments, so it was only a matter of time before this came to iOS. While it may cause challenges for some, it can be avoided on corporate devices by deploying via DEP or Configurator, as indicated in the Apple article at the top of this blog. Hopefully there will be some sort of trust relationship between Apple and identified MDM providers to mitigate the potential impact.

Contributor

Just to make sure this only applies to BYOD manual enrolled devices but doesn't affect activation of DEP devices?

@Brian Hoyt That's correct, this should not impact DEP enrollments.

Occasional Visitor

Any updates?