Step-by-Step Guide: Connecting Microsoft Intune with Apple Business Manager for iPhone Enrollment

IT administrators can use Automated Device Enrollment (ADE) to automatically enroll corporate iPhones into Microsoft Intune during initial device setup, eliminating the need for manual staging. The process requires completing prerequisites in sequence, including setting the MDM authority, obtaining an APNs certificate, and creating an enrollment program token that links Apple Business Manager (ABM) with Intune. Devices must be associated with ABM either through an Apple-authorized reseller at the time of purchase or manually via Apple Configurator, with reseller-purchased devices receiving stronger management controls and no provisional release period. Once devices are assigned to the MDM server in ABM and an enrollment profile is created and assigned in Intune, iPhones can be handed directly to users straight out of the box. ADE also enables Supervised mode, which grants administrators broader control over device settings, app installation restrictions, and feature management compared to manual enrollment methods.