Supporting Apple User Enrollment for iOS and iPadOS devices

You can use the User privacy - User enrollment activation type for iOS and iPadOS devices to ensure that user data is kept private and separated from work data. With this activation type, a separate work space is installed on the device for work apps and the native Notes, iCloud Drive, Mail (attachments and full email bodies), Calendar (attachments), and iCloud Keychain apps. This activation type enables app management, IT policy management, email profiles, Wi-Fi profiles, and per-app VPN. Administrators can manage work data (for example, wipe work data) without affecting personal data. This activation type is supported on unsupervised iPhone and iPad devices that run supported versions of iOS or iPadOS.

Note: The User privacy - User enrollment activation type is not supported for iOS 18 and later.
If you want to support Apple User Enrollment, do the following:
  • Verify that the devices that you will activate using this activation type are not supervised.
  • Create a managed Apple ID account for each user. The managed Apple ID email address must match the user’s email address in BlackBerry UEM.
  • When you set the device activation password for a user, select the Apple User Enrollment activation email template.
  • If you want to allow users to easily activate other BlackBerry Dynamics apps, import certificates, use BlackBerry 2FA features, use BlackBerry Protect Mobile, and check their compliance status, assign the BlackBerry UEM Client using a VPP license. If you set the disposition to Required, the user is prompted to install the app. If you set the disposition to Optional, the user must manually download the app from Work Apps.