Automated Device Enrollment (ABM/ASM)

Enrolling devices through Apple Business Manager (ABM) or Apple School Manager (ASM) from  MDM Console, allows IT administrators to automate the deployment and management of Apple devices, such as iPhones, iPads, Macs, iPod and Apple TVs, across an organization. This integration simplifies bulk device onboarding, ensuring that devices are configured, managed, and secured from the moment they are activated.

This guide provides a step-by-step overview of how to set up and use ABM/ASM with MDM Plus, covering everything from initial account setup to device assignment, configuration, and ongoing management. By following this guide, you can streamline device enrollment, reduce administrative overhead, and maintain control over your organization’s Apple devices.

What is ABM and ASM?

Apple Business Manager (ABM)

Apple Business Manager (ABM) is a web-based portal designed to help IT administrators streamline the management of Apple devices within an organization. It provides a unified platform for managing device deployment, app purchases, and user management.

Apple School Manager (ASM)

Apple School Manager (ASM) is a similar web-based portal tailored for educational institutions. It facilitates the management of Apple devices and content in schools and educational environments.

Both ABM and ASM are essential tools for organizations and educational institutions to efficiently manage their Apple devices and ensure a seamless user experience.

Benefits of Automated Device Enrollment (ABM/ASM)

Enrolling a device through Apple Business/School Manager (ABM/ASM) in ME MDM offers significant advantages for admins, end users, and the organization:

For Admin:

• Device Enrollment and Management: Company devices are required to be enrolled in the management system and cannot be removed by the user. This ensures that all company devices, whether in stock, actively deployed, or scheduled for retirement, are centrally managed and tracked in a unified repository.
• Prevent Activation Lock: Ensure seamless device reassignment by disabling or bypassing Activation Lock on managed Apple devices. To learn more, visit our How to prevent Activation Lock Guide.
• Device Re-Provisioning: The admin can remotely wipe the device, modify enrollment settings and policies, and reassign it to another user.
• Zero-Touch Deployment: Devices can be pre-configured before they reach employees, ensuring they are ready to use out of the box with all necessary settings, apps, and policies.
• Device Management and Security: OS update policies ensure that devices stay up-to-date with the latest patches. You can also use kiosk or blocklist app policies to prevent the use of unwanted apps. Additionally, enterprise apps can be easily installed, and restrictions such as wallpaper policies can be enforced for better control.

For End Users:

• Zero Setup Hassle: End users receive devices pre-configured and ready to use, eliminating the need for manual setup and reducing downtime.
• Seamless Device Activation with Company Credentials: Users can activate their devices using company credentials and automatically receive the relevant apps and policies.

How ABM and ASM Works?

1. Add Device to ABM/ASM:The organization links either a reseller ID or a customer ID to add devices to the Apple Business Manager (ABM) portal. For devices not linked to a reseller, the Apple Configurator app can be used to add them.
2. Integrate ABM/ASM with MDM: The MDM portal is integrated with the ABM/ASM portal using one or more MDM server tokens. Organizations can create multiple MDM servers in ABM/ASM to configure different device activation settings tailored to various departments, such as servers for macOS devices, shared devices, or user-enabled devices.
3. Device Activation Settings: The MDM configures device activation settings within the ABM/ASM portal for the linked MDM server tokens. This includes customizing setup screens, enabling shared iPads, and setting up default Mac accounts.
4. Activate Device: When a factory-reset or new device is powered on, it contacts the ABM/ASM portal.
5. Device Receives Pre-defined activation settings: During the boot-up process, the device retrieves the predefined activation settings from the ABM/ASM portal.
6. Device Enrollment: Once the device receives its settings, it enrolls into the MDM system and is marked as "Device Activation Complete".
7. Managed Devices: The device is then assigned to a specific user and/or group to finalize the enrollment process. At this stage, the MDM sends the necessary profiles and apps to the device, designating it as a managed device.

What's Next?

Enroll Device through ABM/ASM

Learn how to enroll your devices in the MDM system through Apple Business Manager by visiting our ABM/ASM Device Enrollment Help Guide.

Device Activation by Admin and End User

Find out how administrators and end users can activate devices after enrollment by checking out the Device Activation Guide.