Supporting Apple User Enrollment for iOS and iPadOS devices Skip Navigation

Supporting
Apple
User Enrollment for
iOS
and
iPadOS
devices

You can use the
User privacy - User enrollment
activation type for
iOS
and
iPadOS
devices to ensure that user data is kept private and separated from work data. With this activation type, a separate work space is installed on the device for work apps and the native Notes,
iCloud
Drive, Mail (attachments and full email bodies), Calendar (attachments), and
iCloud Keychain
apps. This activation type enables app management, IT policy management, email profiles,
Wi-Fi
profiles, and per-app VPN. Administrators can manage work data (for example, wipe work data) without affecting personal data. This activation type is supported on unsupervised
iPhone
and
iPad
devices that run supported versions of
iOS
or
iPadOS
.
If you want to support
Apple
User Enrollment, do the following:
  • Verify that the devices that you will activate using this activation type are not supervised.
  • Create a managed
    Apple
    ID account for each user. The managed
    Apple
    ID email address must match the user’s email address in
    BlackBerry UEM
    .
  • When you set the device activation password for a user, select the
    Apple
    User Enrollment activation email template.
  • If you want to allow users to easily activate other
    BlackBerry Dynamics
    apps, import certificates, use
    BlackBerry 2FA
    features, use
    CylancePROTECT
    , and check their compliance status, assign the
    BlackBerry UEM Client
    using a VPP license. If you set the disposition to Required, the user is prompted to install the app. If you set the disposition to Optional, the user must manually download the app from Work Apps.