Supporting

Apple

User Enrollment for

iOS

and

iPadOS

devices

You can use the

User privacy - User enrollment

activation type for

iOS

and

iPadOS

devices to ensure that user data is kept private and separated from work data. With this activation type, a separate work space is installed on the device for work apps and the native Notes,

iCloud

Drive, Mail (attachments and full email bodies), Calendar (attachments), and

iCloud Keychain

apps. This activation type enables app management, IT policy management, email profiles,

Wi-Fi

profiles, and per-app VPN. Administrators can manage work data (for example, wipe work data) without affecting personal data. This activation type is supported on unsupervised

iPhone

and

iPad

devices that run supported versions of

iOS

or

iPadOS

.

If you want to support

Apple

User Enrollment, do the following:

Verify that the devices that you will activate using this activation type are not supervised.
Create a managed
Apple
ID account for each user. The managed
Apple
ID email address must match the user’s email address in
BlackBerry UEM
.
When you set the device activation password for a user, select the
Apple
User Enrollment activation email template.
If you want to allow users to easily activate other
BlackBerry Dynamics
apps, import certificates, use
BlackBerry 2FA
features, use
CylancePROTECT
, and check their compliance status, assign the
BlackBerry UEM Client
using a VPP license. If you set the disposition to Required, the user is prompted to install the app. If you set the disposition to Optional, the user must manually download the app from Work Apps.