Supporting Apple User Enrollment for iOS and iPadOS devices
Apple
User Enrollment for iOS
and iPadOS
devicesYou can use the
User privacy - User enrollment
activation type for iOS
and iPadOS
devices to make sure that user data is kept private and separated from work data. With this activation type, a separate work space is installed on the device for work apps and the native Notes, iCloud
Drive, Mail (attachments and full email bodies), Calendar (attachments), and iCloud Keychain
apps. This activation type enables app management, IT policy management, email profiles, Wi-Fi
profiles, and per-app VPN. Administrators can manage work data (for example, wipe work data) without affecting personal data. This activation type is supported on unsupervised iPhone
and iPad
devices that run iOS
or iPad
OS 13.1 or later.If you want to support
Apple
User Enrollment, verify the following:- Verify that the devices that you will activate using this activation type are not supervised.
- Create a managedAppleID account for each user. The managedAppleID email address must match the user’s email address inBlackBerry UEM.
- When you set the device activation password for a user, make sure to select theAppleUser Enrollment activation email template.
- Assign theBlackBerry UEM Clientusing a VPP license to users if you want to allow them to easily activate otherBlackBerry Dynamicsapps, import certificates, useBlackBerry 2FAfeatures, useCylancePROTECT, and check their compliance status. If you set the disposition to Required, the user is prompted to install the app. If you set the disposition to Optional, the user must manually download the app from Work Apps.