Ready. Set.
Whether your organization has ten devices or ten thousand, Apple fits easily into your existing infrastructure. Zero-touch deployment allows IT to configure and manage remotely, and IT can tailor the setup process to any team. So every Mac, iPad, iPhone, and Apple TV is ready to go from the start.
You’re in control
with Apple
Business Manager.
Apple Business Manager is a web-based portal that helps you deploy iPhone, iPad, Mac, and Apple TV. And you can easily provide employees with access to Apple services, set up device enrollment, and distribute apps, books, and software — all from one place.
Devices
Enroll devices to be set up automatically with mobile device management (MDM). Streamline and customize the setup process for employees.
Content
Easily buy apps and books for employees. And distribute custom apps within your organization.
People
Create Managed Apple IDs for employees and assign privileges for additional users on your IT team.
Integrate with any environment.
Wi-Fi and Networking. Apple devices have secure wireless network connectivity built in. iOS, iPadOS, and macOS all provide the built-in security to access those wireless networks, including industry-standard WPA3-Enterprise and 802.1X. When an Apple device is used on a Cisco network, Fast Lane prioritizes the most critical business apps so that employees have uninterrupted access. And enhanced roaming capabilities ensure that iPhone and iPad remain connected as they travel across access points.
VPN. Easily configure Apple devices for secure access to your corporate network through built-in support for VPN. Out of the box, iOS, iPadOS, and macOS support the industry-standard networks IKEv2, Cisco IPsec, and L2TP over IPsec. Apple devices also support VPN On Demand, Always On VPN, and Per App VPN for facilitating connections on a much more granular basis for managed apps or specific domains. Whatever method your business chooses, data in transit is protected.
Email. iPhone, iPad, and Mac work with Microsoft Exchange, Office 365, and other popular email services, like G Suite, for instant access to push email, calendar, contacts, and tasks over an encrypted SSL connection. And Exchange support is built right into the Mail, Calendar, Contacts, and Reminders apps on iPhone and iPad — making it intuitive for employees to perform common tasks such as accepting meeting invitations and finding contacts in the Global Address List.
File Providers. The Files app in iOS and iPadOS and the Finder in macOS let employees instantly access their third-party cloud services — like Box, Dropbox, OneDrive, Adobe Creative Cloud, and Google Drive — so they have all of their files on all of their devices. The Files app and the Finder also have built-in support for file sharing with SMB and WebDAV, ensuring that employees can access the corporate file servers seamlessly on all their Apple devices.
Directory Services. Apple devices can access directory services for managing identity and other user data, including Active Directory, LDAP, and Open Directory. Some MDM vendors provide tools to integrate their management solutions with Active Directory and LDAP directories — right out of the box. And for organizations using on-premise Active Directory, a first-party Kerberos extension provides password management and Kerberos ticket management for signing in to internal apps and websites.
Identity Providers. The latest versions of iOS, iPadOS, and macOS support a new single sign-on (SSO) extension framework, allowing users to sign in to a corporate application once without being asked again for other apps or websites. This feature enables advanced multifactor authentication, supported by participating identity providers, whenever users sign in to a corporate resource. IT teams can also now configure authentication from cloud identity providers during initial enrollment and device setup.
Flexible deployment options for every scenario.
Apple makes it easy to choose the right deployment option to meet the needs of your organization. Protect company information while maintaining privacy for employees who bring their own devices to work with User Enrollment. Or maintain a higher level of control on organization-owned devices with supervision and Device Enrollment.
User Enrollment for BYOD.
It’s safe and secure.
User Enrollment allows employees to protect their privacy while IT keeps corporate data safe. Behind the scenes, a separate volume keeps everyone’s managed data cryptographically separated.
Only manage what’s necessary.
IT can manage a subset of configurations and policies while restricting certain management tasks such as remotely wiping the entire device or collecting personal information.
Use two Apple IDs on one device.
Employees bringing their own devices to work can also bring their existing Apple ID alongside a Managed Apple ID for corporate data. All data is kept separate and private.
MDM functions are limited on personal devices.
IT can
Configure accounts
Configure Per App VPN