Home
%3CLINGO-SUB%20id%3D%22lingo-sub-873555%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-873555%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20news%20that%20this%20is%20landing%20right%20around%20iOS%2013.1%20release%20-%20thanks%20for%20always%20being%20on%20top%20of%20the%20ball.%3CBR%20%2F%3E%3CBR%20%2F%3EAre%20there%20similar%20plans%20for%20User%20Enrollment%20on%20MacOS%20with%20the%20upcoming%20release%20of%2010.15%20Catalina%20in%20October%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-873724%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-873724%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20Job%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fcool_40x40.gif%22%20alt%3D%22%3Acool%3A%22%20title%3D%22%3Acool%3A%22%20%2F%3E%20Thanks%20!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-874546%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-874546%22%20slang%3D%22en-US%22%3EThe%20new%20user%20enrollment%20process%20let's%20the%20user%20select%20wether%20the%20device%20is%20personal%20or%20corporate.%20What%20are%20the%20controls%20available%20to%20prevent%20a%20user%20from%20selecting%20personal%20when%20the%20device%20is%20truely%20corporate%20owned%3F%20What%20is%20the%20work%20flow%20user%20is%20assigned%20a%20%22User%20Enrollment%22%20profile%20and%20recieves%20a%20device%20configured%20for%20Apple%20Business%20Manager%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-876141%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-876141%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102408%22%20target%3D%22_blank%22%3E%40Manoj%20Sood%3C%2FA%3E%20If%20a%20device%20is%20assigned%20a%20Automated%20Device%20Enrollment%20(formerly%20known%20as%20DEP)%20profile%20as%20a%20corporate%20device%20added%20in%20Apple%20Business%20Manager%2C%20the%20user%20will%20not%20be%20provided%20with%20the%20option%20to%20select%20whether%20their%20device%20is%20owned%20by%20them%20or%20their%20organization%20and%20will%20not%20have%20the%20option%20to%20elect%20to%20use%20Device%20Enrollment%20or%20User%20Enrollment.%20Users%20will%20only%20see%20this%20set%20of%20options%20if%20the%20admin%20explicitly%20targets%20them%20with%20a%20policy%20to%20require%20the%20user%20to%20select%20device%20type.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-876766%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-876766%22%20slang%3D%22en-US%22%3E%3CP%3EWill%20you%20update%20this%20blog%20article%20when%20documentation%20is%20available%3F%3C%2FP%3E%3CP%3EWaiting%20for%20the%20feature%20rollout%20is%20complete.%20I%20do%20see%20the%20Enrollment%20targeting%20profile%20section%20in%20our%20Azure%20Portal%20but%20creating%20a%20profile%20is%20always%20failing%20with%20an%20error.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-877118%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-877118%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F395052%22%20target%3D%22_blank%22%3E%40weberda%3C%2FA%3E%26nbsp%3B-%20I%20am%20seeing%20the%20same%20behavior.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-877176%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-877176%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F207902%22%20target%3D%22_blank%22%3E%40Tiffany%20Silverstein%3C%2FA%3E%20%22Users%20will%20only%20see%20this%20set%20of%20options%20if%20the%20admin%20explicitly%20targets%20them%20with%20a%20policy%20to%20require%20the%20user%20to%20select%20device%20type.%22%20It%20is%20unclear%20to%20me%20what%20the%20user%20experience%20will%20be%20if%20a%20user%20has%20a%20user%20enrollment%20profile%20assinged%20to%20them%20(IE%20for%20their%20personal%20iPad)%20AND%20has%20a%20Corporate%20iPhone%20that%20is%20enrollmed%20in%20Apple%20DEP%3F%20Would%20the%20iPhone%20still%20not%20get%20prompted%20to%20select%20the%20device%20type%20because%20it%20is%20a%20DEP%20device%20even%20though%20a%20user%20enrollment%20policy%20is%20explicitly%20assigned%20to%20them%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-877177%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-877177%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F395052%22%20target%3D%22_blank%22%3E%40weberda%3C%2FA%3E%20In%20the%20same%20position%20now%20for%20the%20past%20few%20days%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-878148%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-878148%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20anyone%20been%20able%20to%20actually%20create%20a%20profile%3F%26nbsp%3B%20I%20get%20an%20error%20every%20time%20like%20the%20others%20have%20stated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-878237%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-878237%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102408%22%20target%3D%22_blank%22%3E%40Manoj%20Sood%3C%2FA%3E%20Devices%20enrolled%20via%20Apple%20DEP%20cannot%20be%20User%20Enrolled%2C%20so%20the%20end%20user%20will%20not%20see%20this%20experience%20in%20the%20Company%20Portal.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F395052%22%20target%3D%22_blank%22%3E%40weberda%3C%2FA%3E%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F184313%22%20target%3D%22_blank%22%3E%40Nathan%20Berger%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F205849%22%20target%3D%22_blank%22%3E%40Robin%20Griffin%3C%2FA%3E%26nbsp%3BDue%20to%20the%20nature%20of%20the%20rollout%20process%2C%20not%20all%20service%20component%20changes%20may%20have%20reached%20your%20tenant%20yet.%20All%20changes%20should%20be%20available%20across%20all%20tenants%20on%20Monday.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-881562%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-881562%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CP%3E%3CSPAN%3EUser%20and%20Device%20enrollment%20depending%20on%20what%20feels%20appropriate%20for%20them.%20This%20enrollment%20type%20is%20associated%20with%20a%20Managed%20Apple%20ID%20which%20supports%20Azure%20AD%20federation%20in%20Apple%20Business%20Manager.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CSPAN%3EWich%20of%20the%20types%20is%20associated%20with%20Managed%20Apple%20ID%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CBLOCKQUOTE%3E%3CP%3E%3CSPAN%3EWe%E2%80%99re%20adding%20support%20for%20Modern%20Authentication%20within%20Setup%20Assistant%20for%20Automated%20Device%20Enrollments%20on%20iOS%20and%20macOS.%20Our%20engineering%20team%20is%20hard%20at%20work%20and%20this%20should%20be%20available%20later%20this%20year.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CSPAN%3ELooking%20forward%20to%20seeing%20how%20it%20works%20on%20the%20macOS%20%3A)%3C%2Fimg%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-882781%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-882781%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F207902%22%20target%3D%22_blank%22%3E%40Tiffany%20Silverstein%3C%2FA%3E%26nbsp%3B-%20Thank%20you!%20It%20works%20now.%26nbsp%3B%20Can%20you%20send%20the%20docs%20for%20Managed%20Apple%20ID%20over%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-882832%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-882832%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F184313%22%20target%3D%22_blank%22%3E%40Nathan%20Berger%3C%2FA%3E%26nbsp%3B%20I%20found%20this%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.apple.com%2Fen-gb%2Fguide%2Fapple-business-manager%2Fmdm1c9622977%2Fweb%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.apple.com%2Fen-gb%2Fguide%2Fapple-business-manager%2Fmdm1c9622977%2Fweb%3C%2FA%3E%26nbsp%3Bfrom%20Apple%20on%20creating%20them%20but%20looking%20forward%20to%20official%20docs%20from%20Microsoft.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-883019%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-883019%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F207902%22%20target%3D%22_blank%22%3E%40Tiffany%20Silverstein%3C%2FA%3E%26nbsp%3Bor%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226779%22%20target%3D%22_blank%22%3E%40Intune%20Support%20Team%3C%2FA%3E%26nbsp%3B-%20How%20can%20a%20company%20enroll%20into%20the%20Apple%20Business%20Manager%20beta%20for%20federated%20Apple%20ID's%3F%26nbsp%3B%20Apple%20support%20does%20not%20know%20of%20any%20beta%20yet.%20We%20can%20only%20add%20Managed%20ID's%20manually%20right%20now.%20Thanks!%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-885170%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-885170%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F184313%22%20target%3D%22_blank%22%3E%40Nathan%20Berger%3C%2FA%3E%26nbsp%3BThe%20enrollment%20works%20fine%20for%20me.%3CBR%20%2F%3ESee%20this%20for%20how%20the%20enrollment%20looks%20like%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-start-with-ios-user-enrollment-using-microsoft-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-start-with-ios-user-enrollment-using-microsoft-intune%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-883454%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-883454%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F207902%22%20target%3D%22_blank%22%3E%40Tiffany%20Silverstein%3C%2FA%3E%26nbsp%3Band%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226779%22%20target%3D%22_blank%22%3E%40Intune%20Support%20Team%3C%2FA%3E%26nbsp%3B-%20I've%20got%20User%20Enrollment%20enabled.%20%3CSTRIKE%3EWhen%20I%20sign%20into%20the%20device%20(latest%20iOS%2013.1.2)%20in%20the%20Company%20Portal%2C%20it%20shows%20%22User%20Enrollment%2C%22%20but%20when%20it%20gets%20to%20the%20profile%2C%20it%20asks%20me%20to%20sign%20in%20twice%20with%20my%20Managed%20Apple%20ID%20and%20does%20not%20add%20it%20to%20Settings.%20The%20process%20stops%20there%2C%20and%20the%20management%20profile%20never%20applies.%26nbsp%3B%20What%20should%20the%20expected%20behavior%20be%3F%3C%2FSTRIKE%3E%20Nevermind%2C%20one%20of%20my%20tokens%20had%20expired.%20Working%20now.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-887221%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-887221%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F110885%22%20target%3D%22_blank%22%3E%40Nathan%20Berger%3C%2FA%3E%20How%20would%20you%20%22add%20Managed%20ID's%20manually%22%20%3F%3F%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-888723%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-888723%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F207902%22%20target%3D%22_blank%22%3E%40Tiffany%20Silverstein%3C%2FA%3E%26nbsp%3BThank%20you.%20Since%20Monday%20everything%20is%20working!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBiggest%20issue%20for%20now%3A%3C%2FP%3E%3CP%3EUnable%20to%20use%20Apple%20VPP%20with%20User%20Enrollment.%20Support%20hasn't%20replied%20yet.%3C%2FP%3E%3CP%3EError%20code%20in%20Intune%20blade%20is%20%22VPP%20requires%20iOS%209.0%2B%22%2C%20however%20I%20am%20using%20the%20latest%20iOS%2013.1.2%20for%20sure...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-899616%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%20and%20iPadOS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-899616%22%20slang%3D%22en-US%22%3E%3CP%3ECreating%20managed%20apple%20ID's%20manually%20is%20great%20for%20testing%2C%20however%20this%20new%20enrollment%20method%20will%20not%20be%20useful%20unless%20federation%20is%20enabled.%20I%20have%20no%20such%20option%20in%20my%20business%20manager%20nor%20do%20I%20see%20any%20information%20about%20any%26nbsp%3Bbeta%20program.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELooking%20forward%20to%20more%20information.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-873094%22%20slang%3D%22en-US%22%3EMicrosoft%20Intune%20Support%20for%20iOS%2013.1%2C%20iPadOS%2C%20and%20macOS%20Catalina10.15%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-873094%22%20slang%3D%22en-US%22%3E%3CP%3E%3CEM%3EUpdated%2010%2F8%2F19%20-%20Intune%20also%20supports%20the%20launch%20of%20macOS%20Catalina%2010.15%20which%20Apple%20released%2010%2F7%2F19.%26nbsp%3B%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EIt%E2%80%99s%20just%20been%20a%20week%20since%20the%20release%20of%20iOS%2013%2C%20as%20discussed%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FMicrosoft-Intune-Support-for-iOS-13-and-iPadOS%2Fba-p%2F861998%22%20target%3D%22_self%22%3Ein%20this%20blog%20post%3C%2FA%3E%3CSPAN%3E%2C%20so%20with%20the%20launch%20of%20iOS%2013.1%2C%20we%20thought%20we%E2%80%99d%20share%20more%20of%20what%E2%80%99s%20new%20and%20coming%20from%20Intune.%26nbsp%3BWith%20the%20release%20of%20iOS%2013.1%2C%20we%20are%20previewing%20User%20Enrollment%20alongside%20Apple%E2%80%99s%20release%20of%20the%20feature%20set.%20This%20preview%20is%20starting%20to%20roll%20out%20today%20and%20we%20expect%20it%20to%20be%20live%20for%20all%20customers%20by%20early%20next%20week%20so%20you%20can%20try%20out%20the%20new%20experience.%20Our%20workflow%20allows%20admins%20to%20target%20User%20Enrollment%20to%20specific%20users%2C%20and%20also%20allows%20other%20users%20to%20have%20a%20choice%20between%20User%20and%20Device%20enrollment%20depending%20on%20what%20feels%20appropriate%20for%20them.%20This%20enrollment%20type%20is%20associated%20with%20a%20Managed%20Apple%20ID%20which%20supports%20Azure%20AD%20federation%20in%20Apple%20Business%20Manager.%20%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3ENote%20that%20federated%20managed%20Apple%20ID's%20are%20currently%20only%20available%20through%20the%20beta%20of%20Apple%20Business%20Manager.%3C%2FFONT%3E%20You%20can%20look%20forward%20to%20a%20more%20extensive%20blog%20post%20and%20documentation%20shortly%2C%20but%20here%E2%80%99s%20a%20sneak%20peek%20at%20the%20end%20user%20experience%20for%20now%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F133340iA35D42AD8AE095E9%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22UserEnrollmentWorkflow.png%22%20title%3D%22UserEnrollmentWorkflow.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20addition%2C%20with%20this%20release%2C%20iOS%20and%20macOS%20Device%20Configuration%20profiles%20will%20now%20support%20single%20sign-on%20(SSO)%20app%20extensions.%20With%20this%20new%20device%20feature%2C%20you%20can%20configure%20an%20SSO%20experience%20so%20that%20users%20can%20access%20a%20whole%20suite%20of%20apps%20and%20websites%20after%20entering%20their%20username%20and%20password%20only%20one%20time.%20You%20will%20have%20the%20choice%20of%20configuring%20a%20generic%20credential%20SSO%20app%20extension%20or%20Apple%E2%80%99s%20new%20built-in%20Kerberos%20app%20extension%2C%20which%20provides%20password%20management%20and%20local%20password%20sync%20with%20your%20on-premise%20Active%20Directory%20instance.%20We%20are%20still%20working%20on%20adding%20support%20for%20an%20Azure%20AD%20single%20sign-on%20app%20extension%20that%20will%20enable%20users%20to%20access%20all%20Microsoft%20apps%20with%20one%20sign-in%2C%20so%20note%20that%E2%80%99s%20coming!%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EWhat%20else%20is%20in%20development%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EBeyond%20just%20Dark%20Mode%20for%20the%20PIN%20screen%2C%20we%E2%80%99re%20also%20bringing%20Dark%20Mode%20to%20the%20Company%20Portal%20app.%20We%20are%20just%20doing%20final%20testing%20now%2C%20so%20we%20anticipate%20it%20will%20ship%20with%20the%20October%20Company%20Portal%20release.%20Here%20is%20a%20glance%20of%20what%20it%20looks%20like%20in%20our%20test%20environment%3A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F133387iF28710B8238677AC%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22phoneapps_resized.png%22%20title%3D%22phoneapps_resized.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EIn%20the%20October%20service%20release%2C%20we%E2%80%99re%20adding%20full%20support%20within%20the%20console%20for%20three%20iOS%2FiPadOS%2013.0%20and%20higher%20new%20restrictions%20applicable%20to%20iOS%20and%20iPadOS%3A%3CUL%3E%0A%3CLI%3EAccess%20to%26nbsp%3Bnetwork%26nbsp%3Bdrive%20in%26nbsp%3BFiles%26nbsp%3Bapp%26nbsp%3B%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3EAccess%20to%20USB%20drive%20in%20Files%20app%3C%2FLI%3E%0A%3CLI%3EWi-Fi%20always%20turned%20on%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2060px%3B%22%3EWhile%20these%20restrictions%20will%20be%20rolling%20out%20with%20our%20October%20release%2C%20they%20can%20be%20applied%20to%20your%20managed%20devices%20today%20using%20custom%20configuration%20profiles.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EWe%E2%80%99re%20adding%20support%20for%20Modern%20Authentication%20within%20Setup%20Assistant%20for%20Automated%20Device%20Enrollments%20on%20iOS%20and%20macOS.%20Our%20engineering%20team%20is%20hard%20at%20work%20and%20this%20should%20be%20available%20later%20this%20year.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20are%20l%3CSPAN%3Eooking%20forward%20to%20getting%20your%20feedback%20on%20user%20enrollment%2C%20dark%20mode%2C%20and%20single%20sign-on.%20You%20can%20comment%20on%20this%20post%20or%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Ereach%20out%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Eto%20us%20on%20Twitter%20by%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Etagging%20us%20at%20%40intunesuppteam.%20%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSTRONG%3EDocumentation%20note%3C%2FSTRONG%3E%3A%26nbsp%3B%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EIf%20you're%20in%20the%20Apple%20Business%20Manager%20beta%20and%20would%20like%20the%20documentation%20for%20Intune%20integration%2C%20direct%20message%20us%20through%20this%20forum%20and%20we%20can%20provide%20those%20docs.%3C%2FFONT%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EKnown%20Issue%20Resolution%3A%26nbsp%3B%3C%2FFONT%3E%3C%2FSTRONG%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EWe%E2%80%99ve%20had%20a%20report%20where%20SCEP%20certs%20linked%20to%20other%20profiles%20reissues%20a%20new%20certificate%20for%20Wi-Fi%20and%20VPN%20at%20every%20check-in.%20This%20behavior%20only%20happens%20if%20the%20cert%20is%20linked%20to%20other%20profiles.%20We%E2%80%99ve%20found%20updating%20to%20iOS%2013.1.2%20fixes%20the%20issue.%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EBlog%20post%20updates%3A%3C%2FFONT%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSPAN%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E9%2F27%2F19%20with%20updated%20information%20on%20the%20Apple%20Business%20Manager%20federated%20managed%20Apple%20ID's%20and%20a%20note%20on%20documentation.%3C%2FFONT%3E%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E10%2F3%2F19%20with%20identifying%20a%20known%20issue%20regarding%20SCEP%20certs%20reissuing%20at%20every%20check-in.%20Updating%20to%20iOS%2013.1.2%20fixes%20the%20issue.%3C%2FFONT%3E%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E10%2F8%2F19%20with%20a%20note%20about%20macOS%20Catalina.%26nbsp%3B%3C%2FFONT%3E%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-873094%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20this%20post%2C%20we%20share%20details%20about%20what's%20releasing%20and%20coming%20in%20Intune%20as%20it%20relates%20to%20iOS%2013%2B.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-873094%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECustomer%20Success%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EiOS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EiOS%2013%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-903740%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%2C%20iPadOS%2C%20and%20macOS%20Catalina10.15%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-903740%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F251881%22%20target%3D%22_blank%22%3E%40Adeel_mattamy1575%3C%2FA%3E%26nbsp%3BApple%20will%20be%20able%20to%20provide%20instructions%20on%20enabling%20AAD%20federation%20when%20the%20feature%20is%20released%20in%20Apple%20Business%20Manager.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-904753%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%2C%20iPadOS%2C%20and%20macOS%20Catalina10.15%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-904753%22%20slang%3D%22en-US%22%3EHi%2C%20Does%20anyone%20know%20how%20to%20request%20access%20to%20the%20Apple%20Business%20Manager%20beta%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-909487%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%2C%20iPadOS%2C%20and%20macOS%20Catalina10.15%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-909487%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F223495%22%20target%3D%22_blank%22%3E%40Jose%20Castillo%20Soriano%3C%2FA%3E%26nbsp%3B-%20I%20reached%20out%20to%20Apple%20Enterprise%20support%20about%20it%20twice.%20First%20time%3A%20%22The%20beta%20features%20are%20already%20live%2C%20no%20need%20for%20beta.%22%20Second%20time%3A%20%22We're%20not%20aware%20of%20any%20beta.%22%3CBR%20%2F%3E%3CBR%20%2F%3EI%20think%20this%20might%20have%20to%20wait%20for%20a%20bit.%20It%20is%20possible%20to%20enroll%20through%20a%20link%20I%20found%20%3CA%20href%3D%22https%3A%2F%2Fbeta.business.apple.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fbeta.business.apple.com%2F%3C%2FA%3E%26nbsp%3Bbut%20if%20you%20already%20have%20a%20tenant%2C%20it%20says%20the%20beta%20is%20closed.%20I%20did%20find%20one%20link%20(may%20have%20been%20that%20one)%20where%20you%20could%20enroll%20a%20new%20company%2C%20but%20that%20doesn't%20seem%20like%20what%20we%20want%20-%20we%20need%20the%20beta%20features%20for%20existing%20enrollments.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3ENo%20solutions%20here%20yet.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-911719%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%2C%20iPadOS%2C%20and%20macOS%20Catalina10.15%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-911719%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20intune%20supports%20iOS%2013.1.2%20%3F%20Users%20on%20iOS%2013.1.2%20are%20unable%20to%20get%20the%20VPN%2C%20Wifi%20certificates..%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-914325%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20Support%20for%20iOS%2013.1%2C%20iPadOS%2C%20and%20macOS%20Catalina10.15%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-914325%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F381995%22%20target%3D%22_blank%22%3E%40Nageshr1845%3C%2FA%3E%2C%26nbsp%3Byes%20Intune%20supports%20Apple%20iOS%20and%20iPadOS%209.0%20and%20later%20which%20also%20includes%20iOS%2013.1.2.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDepending%20on%20the%20error%20you're%20seeing%20within%20the%20Intune%20Portal%2C%20have%20a%20look%20at%20our%20troubleshooting%20guide%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fconfiguration%2Ftroubleshoot-policies-in-microsoft-intune%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3ETroubleshoot%20policies%20and%20profiles%20and%20in%20Intune%3C%2FA%3E%20to%20see%20if%20this%20resolves%20your%20issue.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20continue%20facing%20an%20issue%20with%20iOS%20policies%20not%20deploying%20as%20expected%2C%20please%20open%20a%20support%20case%20via%20the%20Intune%20Admin%20console's%20Help%20and%20Support%20or%20any%20of%20the%20methods%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Ffundamentals%2Fget-support%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E%2C%20as%20this%20will%20help%20the%20team%20capture%20all%20the%20information%20needed%20to%20resolve%20the%20issue.%20Also%2C%20please%20direct%20message%20us%20with%20your%20support%20case%20number%20for%20follow%20up.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E

Updated 10/8/19 - Intune also supports the launch of macOS Catalina 10.15 which Apple released 10/7/19. 

 

It’s just been a week since the release of iOS 13, as discussed in this blog post, so with the launch of iOS 13.1, we thought we’d share more of what’s new and coming from Intune. With the release of iOS 13.1, we are previewing User Enrollment alongside Apple’s release of the feature set. This preview is starting to roll out today and we expect it to be live for all customers by early next week so you can try out the new experience. Our workflow allows admins to target User Enrollment to specific users, and also allows other users to have a choice between User and Device enrollment depending on what feels appropriate for them. This enrollment type is associated with a Managed Apple ID which supports Azure AD federation in Apple Business Manager. Note that federated managed Apple ID's are currently only available through the beta of Apple Business Manager. You can look forward to a more extensive blog post and documentation shortly, but here’s a sneak peek at the end user experience for now:

 

UserEnrollmentWorkflow.png

 

In addition, with this release, iOS and macOS Device Configuration profiles will now support single sign-on (SSO) app extensions. With this new device feature, you can configure an SSO experience so that users can access a whole suite of apps and websites after entering their username and password only one time. You will have the choice of configuring a generic credential SSO app extension or Apple’s new built-in Kerberos app extension, which provides password management and local password sync with your on-premise Active Directory instance. We are still working on adding support for an Azure AD single sign-on app extension that will enable users to access all Microsoft apps with one sign-in, so note that’s coming!

 

What else is in development?

  • Beyond just Dark Mode for the PIN screen, we’re also bringing Dark Mode to the Company Portal app. We are just doing final testing now, so we anticipate it will ship with the October Company Portal release. Here is a glance of what it looks like in our test environment:

phoneapps_resized.png

 

  • In the October service release, we’re adding full support within the console for three iOS/iPadOS 13.0 and higher new restrictions applicable to iOS and iPadOS:
    • Access to network drive in Files app  
    • Access to USB drive in Files app
    • Wi-Fi always turned on

While these restrictions will be rolling out with our October release, they can be applied to your managed devices today using custom configuration profiles.

 

  • We’re adding support for Modern Authentication within Setup Assistant for Automated Device Enrollments on iOS and macOS. Our engineering team is hard at work and this should be available later this year.

 

We are looking forward to getting your feedback on user enrollment, dark mode, and single sign-on. You can comment on this post or reach out to us on Twitter by tagging us at @intunesuppteam.  

 

Documentation noteIf you're in the Apple Business Manager beta and would like the documentation for Intune integration, direct message us through this forum and we can provide those docs.

 

Known Issue Resolution: We’ve had a report where SCEP certs linked to other profiles reissues a new certificate for Wi-Fi and VPN at every check-in. This behavior only happens if the cert is linked to other profiles. We’ve found updating to iOS 13.1.2 fixes the issue. 

 

Blog post updates:

  • 9/27/19 with updated information on the Apple Business Manager federated managed Apple ID's and a note on documentation.
  • 10/3/19 with identifying a known issue regarding SCEP certs reissuing at every check-in. Updating to iOS 13.1.2 fixes the issue.
  • 10/8/19 with a note about macOS Catalina. 
24 Comments
New Contributor

Great news that this is landing right around iOS 13.1 release - thanks for always being on top of the ball.

Are there similar plans for User Enrollment on MacOS with the upcoming release of 10.15 Catalina in October?

Great Job :cool: Thanks !

Occasional Contributor
The new user enrollment process let's the user select wether the device is personal or corporate. What are the controls available to prevent a user from selecting personal when the device is truely corporate owned? What is the work flow user is assigned a "User Enrollment" profile and recieves a device configured for Apple Business Manager?

@Manoj Sood If a device is assigned a Automated Device Enrollment (formerly known as DEP) profile as a corporate device added in Apple Business Manager, the user will not be provided with the option to select whether their device is owned by them or their organization and will not have the option to elect to use Device Enrollment or User Enrollment. Users will only see this set of options if the admin explicitly targets them with a policy to require the user to select device type.

New Contributor

Will you update this blog article when documentation is available?

Waiting for the feature rollout is complete. I do see the Enrollment targeting profile section in our Azure Portal but creating a profile is always failing with an error.

New Contributor

@weberda - I am seeing the same behavior.

Occasional Contributor
@Tiffany Silverstein "Users will only see this set of options if the admin explicitly targets them with a policy to require the user to select device type." It is unclear to me what the user experience will be if a user has a user enrollment profile assinged to them (IE for their personal iPad) AND has a Corporate iPhone that is enrollmed in Apple DEP? Would the iPhone still not get prompted to select the device type because it is a DEP device even though a user enrollment policy is explicitly assigned to them?
Occasional Contributor
@weberda In the same position now for the past few days
Regular Visitor

Has anyone been able to actually create a profile?  I get an error every time like the others have stated.

 @Manoj Sood Devices enrolled via Apple DEP cannot be User Enrolled, so the end user will not see this experience in the Company Portal.

 

@weberda @Nathan Berger @Robin Griffin Due to the nature of the rollout process, not all service component changes may have reached your tenant yet. All changes should be available across all tenants on Monday.

Occasional Contributor

User and Device enrollment depending on what feels appropriate for them. This enrollment type is associated with a Managed Apple ID which supports Azure AD federation in Apple Business Manager.

Wich of the types is associated with Managed Apple ID? 

 

We’re adding support for Modern Authentication within Setup Assistant for Automated Device Enrollments on iOS and macOS. Our engineering team is hard at work and this should be available later this year.

Looking forward to seeing how it works on the macOS :)

New Contributor

@Tiffany Silverstein - Thank you! It works now.  Can you send the docs for Managed Apple ID over?

Regular Visitor

@Nathan Berger  I found this: https://support.apple.com/en-gb/guide/apple-business-manager/mdm1c9622977/web from Apple on creating them but looking forward to official docs from Microsoft.

New Contributor

@Tiffany Silverstein or @Intune Support Team - How can a company enroll into the Apple Business Manager beta for federated Apple ID's?  Apple support does not know of any beta yet. We can only add Managed ID's manually right now. Thanks!

New Contributor

@Tiffany Silverstein and @Intune Support Team - I've got User Enrollment enabled. When I sign into the device (latest iOS 13.1.2) in the Company Portal, it shows "User Enrollment," but when it gets to the profile, it asks me to sign in twice with my Managed Apple ID and does not add it to Settings. The process stops there, and the management profile never applies.  What should the expected behavior be? Nevermind, one of my tokens had expired. Working now.

Regular Contributor

@Nathan Berger The enrollment works fine for me.
See this for how the enrollment looks like https://www.inthecloud247.com/how-to-start-with-ios-user-enrollment-using-microsoft-intune/

Occasional Contributor
@Nathan Berger How would you "add Managed ID's manually" ???
New Contributor

@Tiffany Silverstein Thank you. Since Monday everything is working!

 

Biggest issue for now:

Unable to use Apple VPP with User Enrollment. Support hasn't replied yet.

Error code in Intune blade is "VPP requires iOS 9.0+", however I am using the latest iOS 13.1.2 for sure...

Senior Member

Creating managed apple ID's manually is great for testing, however this new enrollment method will not be useful unless federation is enabled. I have no such option in my business manager nor do I see any information about any beta program.

 

Looking forward to more information.

@Adeel_mattamy1575 Apple will be able to provide instructions on enabling AAD federation when the feature is released in Apple Business Manager.

Senior Member
Hi, Does anyone know how to request access to the Apple Business Manager beta?
New Contributor

@Jose Castillo Soriano - I reached out to Apple Enterprise support about it twice. First time: "The beta features are already live, no need for beta." Second time: "We're not aware of any beta."

I think this might have to wait for a bit. It is possible to enroll through a link I found https://beta.business.apple.com/ but if you already have a tenant, it says the beta is closed. I did find one link (may have been that one) where you could enroll a new company, but that doesn't seem like what we want - we need the beta features for existing enrollments. 

No solutions here yet.

Regular Visitor

Does intune supports iOS 13.1.2 ? Users on iOS 13.1.2 are unable to get the VPN, Wifi certificates.. 

Hi @Nageshr1845, yes Intune supports Apple iOS and iPadOS 9.0 and later which also includes iOS 13.1.2.

 

Depending on the error you're seeing within the Intune Portal, have a look at our troubleshooting guide: Troubleshoot policies and profiles and in Intune to see if this resolves your issue.

 

If you continue facing an issue with iOS policies not deploying as expected, please open a support case via the Intune Admin console's Help and Support or any of the methods here, as this will help the team capture all the information needed to resolve the issue. Also, please direct message us with your support case number for follow up.

 

Thanks!