Apple Business Manager

RSS for tag

Offer custom apps to organizations. Manage your organization's devices, apps, and accounts.

Posts under Apple Business Manager tag

57 Posts

Post

Replies

Boosts

Views

Activity

Logon to Mac OS with Dev Account which is Account Holder
I'm a solo developer and owner of my companies account. I'm trying to sign on to my Mac so I can use my developer account to get a certificate for wallet use and to select the correct developer account for applications in Xcode. I'm am brand new to all this so apologize if I'm missing the simple solution. I'm not able to edit the roles of my developer account but being an Admin I should already have all the necessary access...I think. I get an error when trying to logon as a work account: Searching for the long error doesn't provide a solution in the forum or through search engines. AI says to check the roles.
0
0
108
4d
Apple Developer Program Enrollment Still Processing – No Updates After Several Days
Hello everyone, I’m posting here because I’m waiting for an update regarding my Apple Developer Program enrollment. My enrollment currently shows: “Your enrollment is being processed.” My Enrollment ID is: 35QVL65M9K I submitted my enrollment several days ago and I haven’t received any email updates or requests for additional information yet. I wanted to ask if anyone from Apple Support or a community admin could please check my case status, or let me know if anything else is needed from my side to continue the review. If additional documents or verification are required, I’m happy to provide them. Thank you very much for your help.
1
0
87
1w
Organizational Apple Developer Account Transfer Stalled — Previous Account Holder Inaccessible
Hello everyone, We’re currently facing an issue with an existing Apple Developer Organization account tied to our company. The original account holder is no longer accessible/unavailable, and our organization needs ownership transferred so we can continue deployment and App Store operations. Over the past ~4 weeks we have: Submitted a CEO-signed authorization letter Contacted Apple Developer Support multiple times via phone/email Had the case escalated to a senior technician/team Been told we would receive a callback within a week However, we still have not received follow-up communication or resolution, and our app launch is currently blocked because we cannot access the organizational developer account. We are considering temporarily enrolling under an Individual Developer account to continue deployment while the organizational escalation remains pending. A few questions: Has anyone successfully gone through a manual organizational account holder reassignment? What was the actual timeline for resolution? Is there a more effective escalation path to Developer Program Operations? Would enrolling as an Individual account create issues later when transferring the app back to the organization account? Any insight or recommendations would be greatly appreciated. Thank you!!!
1
0
101
1w
Device receives DeclarationItems manifest but never fetches individual declaration bodies
Hi, We're implementing a DDM-capable MDM server. A DEP-enrolled, supervised iPad (iOS 26.4.2) successfully completes manifest synchronization but never proceeds to fetch the individual declaration bodies. Looking for guidance on what we might be missing. Observed flow (from our server logs): We enqueue a DeclarativeManagement MDM command and APNs-wake the device. The command body is: RequestTypeDeclarativeManagement (no Data field) Device acknowledges the command on the Connect endpoint (Status=Acknowledged). Device calls CheckIn with: MessageType = DeclarativeManagement Endpoint = tokens We respond 200 with: { "SyncTokens": { "DeclarationsToken": "", "Timestamp": "2026-05-19T..." } } Device calls CheckIn with: MessageType = DeclarativeManagement Endpoint = declaration-items We respond 200 with: { "Declarations": { "Activations": [{"Identifier":"...","ServerToken":"v1-..."}], "Configurations": [{"Identifier":"...","ServerToken":"v1-..."}], "Assets": [], "Management": [] }, "DeclarationsToken": "" } ---- Nothing further. ---- No request for Endpoint = declaration/activation/ No request for Endpoint = declaration/configuration/ No status report on Endpoint = status The MDM channel is healthy. The same device responds normally to non-DDM commands (DeviceInformation, etc.) immediately before and after this flow. Questions: Is an empty "Management" array acceptable in the declaration-items response, or is at least one declaration (e.g. com.apple.management. organization-info) required before the device will proceed to fetch declaration bodies? The DeclarationsToken returned in step 3 (tokens) and step 4 (declaration-items) are byte-identical. Is that correct, or should they differ in some way? Are there any additional preconditions for the device to begin fetching declaration bodies after receiving the manifest -- e.g. a specific Activation->Configuration linkage we might be missing? Is there a server-side log signal Apple can suggest we look for, or a way to see why the device decided not to fetch? Activation payload sample we publish: { "Type": "com.apple.activation.simple", "Identifier": "...", "ServerToken": "v1-...", "Payload": { "StandardConfigurations": ["<configuration-identifier-from-step-4>"] } } Configuration payload sample we publish: { "Type": "com.apple.configuration.softwareupdate.settings", "Identifier": "...", "ServerToken": "v1-...", "Payload": { ... softwareupdate settings ... } } Any pointers appreciated. Happy to share full server-side logs / payloads if useful. Thanks.
1
0
849
1w
EVID(External Version ID)
Our organization is attempting to retrieve the External Version Identifier (EVID) history for all published versions. This data is required so that we can pass the exact externalVersionIdentifier integer to our deployment framework to pin specific app versions on our managed devices. We currently have an active App Store Connect account, but our attempts to fetch this data via standard publishing APIs return a 401 Unauthorized error. To help us resolve this technical blocker, please provide explicit engineering guidance on the following four points: API Endpoint Architecture: Is the enterprise Apps and Books for Organizations API (apple.com) the only platform that exposes the externalVersionId history for all versions? If so, what is the exact endpoint path we must call to return the full version-based EVID array? Account Requirements: Can these version-specific EVIDs be retrieved using our existing App Store Connect developer credentials, or is an Apple Business Manager (ABM) account strictly mandatory to bypass the 401 gate? ABM Portal Setup for EVIDs Only: If an ABM account is mandatory, what are the minimum technical steps required inside the ABM dashboard to fetch only the EVID data? Specifically, do we need to "purchase" a volume license for the target app to make its version history accessible via the API? Authentication Parameters: What is the correct token structure for this endpoint? Do we need to pass a specific location server token (sToken / itvt cookie) generated inside ABM alongside our signed developer JWT header? Thank you for your time and technical guidance. We look forward to your engineering team's response.
0
0
482
2w
Appstore Connect Not Affecting Organizational Status — Senior Advisor Escalation Gone Silent — Case #102854501693
My support case has stalled despite being escalated to a Senior Advisor over a week ago with no follow-up or resolution. My application is being rejected from the App Store due to what appears to be a synchronization issue between apple.developer.com and App Store Connect. Full Timeline March 24, 2026 — My account migration from Individual to Organization was completed and approved by Apple. March 27, 2026 — My app (Version 1.0, Submission ID: 72b19231-8010-4844-b873-f2853d02092e) was rejected under Guideline 3.1.5 on an iPad Air 11-inch (M3). The rejection stated my app was submitted under an Individual account, which is not permitted for fintech applications. March 28, 2026 — I submitted a support request explaining the situation. April 6th, 2026 — I received a response from Developer Support, who acknowledged the issue and escalated it to a Senior Advisor. April 7, 2026 — I followed up via email as no Senior Advisor had contacted me. Today, April 13, 2026 — Still no contact from the Senior Advisor. App Store Connect still shows my account as Individual. Core Issue: When I go to apple.developer.com my account membership type is organization, with all relevant company details. However, my membership type in AppStore Connect still reflects an individual account. Such is demonstrated by an App Store review response: "Your wallet app facilitates the transmission and/or storage of a virtual currency but was submitted by an Apple Developer Program account registered to an individual, which is not appropriate for the App Store. Your app must be submitted through an Apple Developer Program account enrolled as an organization." What I Need A manual update of my Appstore Connect membership type such that it correctly reflects my Organization account status; allowing me to resubmit my app. Relevant details: Case Number: 102854501693 (screenshots of issue provided in case details) If any Apple staff can help escalate this internally or advise on next steps, I would be incredibly grateful.
0
0
82
Apr ’26
DeviceInformationCommand Not Received After Enrollment – MDM Push Issue
Hi everyone, I'm running an Apple MDM service and encountering an issue where a number of devices stop receiving MDM push commands within 10 days of profile installation, even though everything appears to be set up correctly. Environment: MDM profile is installed and verified (status: OK, result: SUCCESS) Devices are cellular-enabled with no connectivity issues APNs certificate is valid (thousands of other devices are communicating normally) The command being sent to devices is DeviceInformationCommand No "NotNow" response or any check-in received from the affected devices for over a week Issue: We send DeviceInformationCommand to devices to retrieve device information and update the last communication timestamp. However, a subset of devices simply stop responding to this command within 10 days of profile installation. The last communication date is not being updated, and no response — not even a "NotNow" — is coming back from these devices. Since other devices on the same MDM setup are working fine, I've ruled out APNs certificate expiration and general server-side issues. Questions: Are there any known management points or configuration settings that could cause a device to silently stop receiving DeviceInformationCommand shortly after enrollment? What diagnostic steps would you recommend to identify the root cause on the device or server side? Are there any known bugs or reported issues related to this behavior in recent iOS versions? Is there any way to recover the MDM communication without requiring the user to re-enroll? Any insights or suggestions would be greatly appreciated. Thank you!
0
0
482
Apr ’26
SecureToken Generation for AutoAdmin Created via Automated Device Enrollment
Hi Apple Community, We are using Automted Device Enrollment to Enroll macOS Devices and we used to Create AutoAdmin, PrimaryAccount using the Command Account Configuration . As a Part of Primary Account Creation while testing we see that BootStrap Token is Escrowed to MDM, and SecureToken is Created to Primary Account. The Primary Account user will enable FileVault as part of our process. As Tested internally, we seen that SecureToken is escrowed to AutoAdmin only when BootStrapToken is escrowed to MDM By device and AutoAdmin logs in then. That too After FileVault Unlock Since we Sendout the Laptop to users to setup themselves there are no chances of AutoAdmin Login to occur. And it defeats the purpose of having the AutoAdmin Account in emergency situation to login into it from Login Window. Can someone confirm if this behavior is expected and what are the expectation and recommendations from Apple on when to use AutoAdmin Account. Is there any other ways to use AutoAdmin directly from LoginWindow Before To FileVault Disk Unlock
0
0
1k
Apr ’26
Cannot Sell App in Apple Store connect distribution
I am distributing my project as Apple Business Manager, but App Availability gives a Cannot Sell warning in my distribution country and I cannot show my application. My country is Türkiye. Why am I having such a distribution problem? Please I would like detailed information on this subject. Is this a software issue or an issue with my application? My application is currently in 1.0.1 Ready for Sale status and I am trying to distribute my application as Private — Available as a custom app on Apple Business Manager.
5
1
1.9k
Mar ’26
[iOS/iPadOS 26.1+] Wi-Fi IP Settings Change from Manual to Automatic When Applying MDM Profile
I have a question regarding MDM functionality for iOS/iPadOS. Background: According to Apple's support page(https://support.apple.com/en-us/125073), since iOS 26.1, "Previous Wi-Fi configurations will be replaced when a new profile is installed." We have observed that because of this change, when we apply a Wi-Fi configuration profile to an iPad via MDM, the manually configured network settings on the device (specifically, "Configure IPv4" and "Configure DNS") are reset to "Automatic". This erases the manually entered IP address, subnet mask, router, and DNS server addresses. Goal: We want to apply a Wi-Fi configuration profile from our MDM server to connect the device to a specific SSID, while preserving the manual IP and DNS settings that have been configured on the device. Question: Is there a way to prevent the IPv4 and DNS settings from being switched from "Manual" to "Automatic" when applying the configuration profile? For example, is there a specific key-value pair we can add to the profile to either preserve the existing manual settings, or to explicitly define manual/static IP settings within the profile itself for iOS/iPadOS? Reference: Sample Configuration Profile Below is a simplified version of the Wi-Fi configuration profile we are currently using. This profile does not contain any keys for IP address configuration. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadType</key> <string>com.apple.wifi.managed</string> <key>PayloadIdentifier</key> <string>com.apple.wifi.managed.13E2E6B3-D4B9-4E23-888A-524B3ED40C38</string> <key>PayloadUUID</key> <string>13E2E6B3-D4B9-4E23-888A-524B3ED40C38</string> <key>PayloadVersion</key> <integer>1</integer> <key>SSID_STR</key> <string>SSID</string> <key>EncryptionType</key> <string>WPA</string> <key>Password</key> <string>Password</string> </dict> </array> <key>PayloadType</key> <string>Configuration</string> </dict> </plist>
0
0
997
Feb ’26
Individual to Organization Membership 17 days, not completed
I want to know about the time it takes to transition from an individual to an organization with Apple's Developer Program. I received an email notifying me that the transition process would begin on February 2nd, 2026, and today, February 19th, 2026, everything still shows as being in progress without any changes. So I want to know the maximum timeframe or how to know if they are actually completing this process. I have sent two support emails, but received no response.
0
0
266
Feb ’26
How can I set up a B2B subscription with ABM + MDM + Paywall
I am looking for guidance on how people have solved this problem/use case. What is the best way to structure a seat based subscription app that an organization can pay for seats for all their users, can be distributed via mdm or via app store and is easy (low friction) to get paid for and started for small companies? I market to a business to buy my app, they want it installed on all 25 devices they have. They use ABM to acquire 25 licenses with and MDM to distribute. The app is currently free to download so ABM charges $0 but has a paywall to use. The paywall is a RevenueCat one and no user account is needed. All entitlements and free trial work great. When it is deployed to the 25 devices, they can either sign up with their own AppleId and own/company credit card, or use a company appleid and company card for all 25 devices to solve the issue but neither are great. Doubtful they would want to pay their money for a company required app on a company phone (don’t blame them). If they share an appleid, my MRR drops to 1/25th since they will just share the purchase. Any suggestions would be greatly appreciated.
0
0
248
Feb ’26
ABM - API - Released Devices
I am working on an internal app for our company that links ABM, Intune, and an AT&T-provided CSV of IMEIs, and I am fairly new to this and using AI (sorry) to help me. I can search for our devices using either the serial # and/or IMEI. If the device has been released, I can still find it using the SN, but not with the IMEI. If a result is returned on a released device's SN, the IMEI is present. I have a list of IMEIs from our AT&T account and want to cross-reference those IMEIs to get the SN. Is there a way to include the Released Devices in the search?
0
0
135
Feb ’26
Apple Business Manager API
Hello, I am trying to authenticate to the Apple Business Manager API to retrieve device information and ingest it into ServiceNow. I am following the documentation here. The first step is to create an API account and download the private key used to create a JWT client assertion. The guide linked above gives a python script to create a client assertion. Below the first python script, the following description is given for the "kid" variable: "The value is your keyId that returns when you upload a public key." This is the first time that a public key, rather than a private key, is referenced. Where is the public key supposed to be uploaded? Later in the guide, a public key is referenced again, in the section describing the client_id Request parameter: "(Required) You receive your clientId when you upload a public key." I have tried to create a client assertion using the keyId that is associated with the API account. When I try to request an access token, however, I also get an "invalid_client" error back. I am wondering if I'm using the wrong values for both key_id and client_id due to not creating and uploading a public key. Any help would be appreciated, thanks!
0
0
630
Jan ’26
Logon to Mac OS with Dev Account which is Account Holder
I'm a solo developer and owner of my companies account. I'm trying to sign on to my Mac so I can use my developer account to get a certificate for wallet use and to select the correct developer account for applications in Xcode. I'm am brand new to all this so apologize if I'm missing the simple solution. I'm not able to edit the roles of my developer account but being an Admin I should already have all the necessary access...I think. I get an error when trying to logon as a work account: Searching for the long error doesn't provide a solution in the forum or through search engines. AI says to check the roles.
Replies
0
Boosts
0
Views
108
Activity
4d
Urgent - Developer Name Change Required
Hi, we're urgently trying to resolve the changing of our account membership details. We need our app developer name to match our business name as it's currently wrong. All the information can be found under the case number 102893432961. Could this please be urgently looked into?
Replies
0
Boosts
0
Views
112
Activity
6d
Paid agreement
Hello, My Paid Apps Agreement has been stuck in "In Process" status since May 16, 2026 — now 9 days with no resolution. I have received no emails from Apple regarding this The agreement has not been rejected The system does not allow me to make any edits I have contacted Apple Developer Support twice with no real response
Replies
0
Boosts
0
Views
49
Activity
1w
Apple Developer Program Enrollment Still Processing – No Updates After Several Days
Hello everyone, I’m posting here because I’m waiting for an update regarding my Apple Developer Program enrollment. My enrollment currently shows: “Your enrollment is being processed.” My Enrollment ID is: 35QVL65M9K I submitted my enrollment several days ago and I haven’t received any email updates or requests for additional information yet. I wanted to ask if anyone from Apple Support or a community admin could please check my case status, or let me know if anything else is needed from my side to continue the review. If additional documents or verification are required, I’m happy to provide them. Thank you very much for your help.
Replies
1
Boosts
0
Views
87
Activity
1w
Organizational Apple Developer Account Transfer Stalled — Previous Account Holder Inaccessible
Hello everyone, We’re currently facing an issue with an existing Apple Developer Organization account tied to our company. The original account holder is no longer accessible/unavailable, and our organization needs ownership transferred so we can continue deployment and App Store operations. Over the past ~4 weeks we have: Submitted a CEO-signed authorization letter Contacted Apple Developer Support multiple times via phone/email Had the case escalated to a senior technician/team Been told we would receive a callback within a week However, we still have not received follow-up communication or resolution, and our app launch is currently blocked because we cannot access the organizational developer account. We are considering temporarily enrolling under an Individual Developer account to continue deployment while the organizational escalation remains pending. A few questions: Has anyone successfully gone through a manual organizational account holder reassignment? What was the actual timeline for resolution? Is there a more effective escalation path to Developer Program Operations? Would enrolling as an Individual account create issues later when transferring the app back to the organization account? Any insight or recommendations would be greatly appreciated. Thank you!!!
Replies
1
Boosts
0
Views
101
Activity
1w
Device receives DeclarationItems manifest but never fetches individual declaration bodies
Hi, We're implementing a DDM-capable MDM server. A DEP-enrolled, supervised iPad (iOS 26.4.2) successfully completes manifest synchronization but never proceeds to fetch the individual declaration bodies. Looking for guidance on what we might be missing. Observed flow (from our server logs): We enqueue a DeclarativeManagement MDM command and APNs-wake the device. The command body is: RequestTypeDeclarativeManagement (no Data field) Device acknowledges the command on the Connect endpoint (Status=Acknowledged). Device calls CheckIn with: MessageType = DeclarativeManagement Endpoint = tokens We respond 200 with: { "SyncTokens": { "DeclarationsToken": "", "Timestamp": "2026-05-19T..." } } Device calls CheckIn with: MessageType = DeclarativeManagement Endpoint = declaration-items We respond 200 with: { "Declarations": { "Activations": [{"Identifier":"...","ServerToken":"v1-..."}], "Configurations": [{"Identifier":"...","ServerToken":"v1-..."}], "Assets": [], "Management": [] }, "DeclarationsToken": "" } ---- Nothing further. ---- No request for Endpoint = declaration/activation/ No request for Endpoint = declaration/configuration/ No status report on Endpoint = status The MDM channel is healthy. The same device responds normally to non-DDM commands (DeviceInformation, etc.) immediately before and after this flow. Questions: Is an empty "Management" array acceptable in the declaration-items response, or is at least one declaration (e.g. com.apple.management. organization-info) required before the device will proceed to fetch declaration bodies? The DeclarationsToken returned in step 3 (tokens) and step 4 (declaration-items) are byte-identical. Is that correct, or should they differ in some way? Are there any additional preconditions for the device to begin fetching declaration bodies after receiving the manifest -- e.g. a specific Activation->Configuration linkage we might be missing? Is there a server-side log signal Apple can suggest we look for, or a way to see why the device decided not to fetch? Activation payload sample we publish: { "Type": "com.apple.activation.simple", "Identifier": "...", "ServerToken": "v1-...", "Payload": { "StandardConfigurations": ["<configuration-identifier-from-step-4>"] } } Configuration payload sample we publish: { "Type": "com.apple.configuration.softwareupdate.settings", "Identifier": "...", "ServerToken": "v1-...", "Payload": { ... softwareupdate settings ... } } Any pointers appreciated. Happy to share full server-side logs / payloads if useful. Thanks.
Replies
1
Boosts
0
Views
849
Activity
1w
EVID(External Version ID)
Our organization is attempting to retrieve the External Version Identifier (EVID) history for all published versions. This data is required so that we can pass the exact externalVersionIdentifier integer to our deployment framework to pin specific app versions on our managed devices. We currently have an active App Store Connect account, but our attempts to fetch this data via standard publishing APIs return a 401 Unauthorized error. To help us resolve this technical blocker, please provide explicit engineering guidance on the following four points: API Endpoint Architecture: Is the enterprise Apps and Books for Organizations API (apple.com) the only platform that exposes the externalVersionId history for all versions? If so, what is the exact endpoint path we must call to return the full version-based EVID array? Account Requirements: Can these version-specific EVIDs be retrieved using our existing App Store Connect developer credentials, or is an Apple Business Manager (ABM) account strictly mandatory to bypass the 401 gate? ABM Portal Setup for EVIDs Only: If an ABM account is mandatory, what are the minimum technical steps required inside the ABM dashboard to fetch only the EVID data? Specifically, do we need to "purchase" a volume license for the target app to make its version history accessible via the API? Authentication Parameters: What is the correct token structure for this endpoint? Do we need to pass a specific location server token (sToken / itvt cookie) generated inside ABM alongside our signed developer JWT header? Thank you for your time and technical guidance. We look forward to your engineering team's response.
Replies
0
Boosts
0
Views
482
Activity
2w
Enrollment Pending
I made a payment for the development program, got the receipt and everything. But I’m still not enrolled.
Replies
0
Boosts
0
Views
87
Activity
2w
Appstore Connect Not Affecting Organizational Status — Senior Advisor Escalation Gone Silent — Case #102854501693
My support case has stalled despite being escalated to a Senior Advisor over a week ago with no follow-up or resolution. My application is being rejected from the App Store due to what appears to be a synchronization issue between apple.developer.com and App Store Connect. Full Timeline March 24, 2026 — My account migration from Individual to Organization was completed and approved by Apple. March 27, 2026 — My app (Version 1.0, Submission ID: 72b19231-8010-4844-b873-f2853d02092e) was rejected under Guideline 3.1.5 on an iPad Air 11-inch (M3). The rejection stated my app was submitted under an Individual account, which is not permitted for fintech applications. March 28, 2026 — I submitted a support request explaining the situation. April 6th, 2026 — I received a response from Developer Support, who acknowledged the issue and escalated it to a Senior Advisor. April 7, 2026 — I followed up via email as no Senior Advisor had contacted me. Today, April 13, 2026 — Still no contact from the Senior Advisor. App Store Connect still shows my account as Individual. Core Issue: When I go to apple.developer.com my account membership type is organization, with all relevant company details. However, my membership type in AppStore Connect still reflects an individual account. Such is demonstrated by an App Store review response: "Your wallet app facilitates the transmission and/or storage of a virtual currency but was submitted by an Apple Developer Program account registered to an individual, which is not appropriate for the App Store. Your app must be submitted through an Apple Developer Program account enrolled as an organization." What I Need A manual update of my Appstore Connect membership type such that it correctly reflects my Organization account status; allowing me to resubmit my app. Relevant details: Case Number: 102854501693 (screenshots of issue provided in case details) If any Apple staff can help escalate this internally or advise on next steps, I would be incredibly grateful.
Replies
0
Boosts
0
Views
82
Activity
Apr ’26
DeviceInformationCommand Not Received After Enrollment – MDM Push Issue
Hi everyone, I'm running an Apple MDM service and encountering an issue where a number of devices stop receiving MDM push commands within 10 days of profile installation, even though everything appears to be set up correctly. Environment: MDM profile is installed and verified (status: OK, result: SUCCESS) Devices are cellular-enabled with no connectivity issues APNs certificate is valid (thousands of other devices are communicating normally) The command being sent to devices is DeviceInformationCommand No "NotNow" response or any check-in received from the affected devices for over a week Issue: We send DeviceInformationCommand to devices to retrieve device information and update the last communication timestamp. However, a subset of devices simply stop responding to this command within 10 days of profile installation. The last communication date is not being updated, and no response — not even a "NotNow" — is coming back from these devices. Since other devices on the same MDM setup are working fine, I've ruled out APNs certificate expiration and general server-side issues. Questions: Are there any known management points or configuration settings that could cause a device to silently stop receiving DeviceInformationCommand shortly after enrollment? What diagnostic steps would you recommend to identify the root cause on the device or server side? Are there any known bugs or reported issues related to this behavior in recent iOS versions? Is there any way to recover the MDM communication without requiring the user to re-enroll? Any insights or suggestions would be greatly appreciated. Thank you!
Replies
0
Boosts
0
Views
482
Activity
Apr ’26
SecureToken Generation for AutoAdmin Created via Automated Device Enrollment
Hi Apple Community, We are using Automted Device Enrollment to Enroll macOS Devices and we used to Create AutoAdmin, PrimaryAccount using the Command Account Configuration . As a Part of Primary Account Creation while testing we see that BootStrap Token is Escrowed to MDM, and SecureToken is Created to Primary Account. The Primary Account user will enable FileVault as part of our process. As Tested internally, we seen that SecureToken is escrowed to AutoAdmin only when BootStrapToken is escrowed to MDM By device and AutoAdmin logs in then. That too After FileVault Unlock Since we Sendout the Laptop to users to setup themselves there are no chances of AutoAdmin Login to occur. And it defeats the purpose of having the AutoAdmin Account in emergency situation to login into it from Login Window. Can someone confirm if this behavior is expected and what are the expectation and recommendations from Apple on when to use AutoAdmin Account. Is there any other ways to use AutoAdmin directly from LoginWindow Before To FileVault Disk Unlock
Replies
0
Boosts
0
Views
1k
Activity
Apr ’26
Cannot Sell App in Apple Store connect distribution
I am distributing my project as Apple Business Manager, but App Availability gives a Cannot Sell warning in my distribution country and I cannot show my application. My country is Türkiye. Why am I having such a distribution problem? Please I would like detailed information on this subject. Is this a software issue or an issue with my application? My application is currently in 1.0.1 Ready for Sale status and I am trying to distribute my application as Private — Available as a custom app on Apple Business Manager.
Replies
5
Boosts
1
Views
1.9k
Activity
Mar ’26
[iOS/iPadOS 26.1+] Wi-Fi IP Settings Change from Manual to Automatic When Applying MDM Profile
I have a question regarding MDM functionality for iOS/iPadOS. Background: According to Apple's support page(https://support.apple.com/en-us/125073), since iOS 26.1, "Previous Wi-Fi configurations will be replaced when a new profile is installed." We have observed that because of this change, when we apply a Wi-Fi configuration profile to an iPad via MDM, the manually configured network settings on the device (specifically, "Configure IPv4" and "Configure DNS") are reset to "Automatic". This erases the manually entered IP address, subnet mask, router, and DNS server addresses. Goal: We want to apply a Wi-Fi configuration profile from our MDM server to connect the device to a specific SSID, while preserving the manual IP and DNS settings that have been configured on the device. Question: Is there a way to prevent the IPv4 and DNS settings from being switched from "Manual" to "Automatic" when applying the configuration profile? For example, is there a specific key-value pair we can add to the profile to either preserve the existing manual settings, or to explicitly define manual/static IP settings within the profile itself for iOS/iPadOS? Reference: Sample Configuration Profile Below is a simplified version of the Wi-Fi configuration profile we are currently using. This profile does not contain any keys for IP address configuration. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadType</key> <string>com.apple.wifi.managed</string> <key>PayloadIdentifier</key> <string>com.apple.wifi.managed.13E2E6B3-D4B9-4E23-888A-524B3ED40C38</string> <key>PayloadUUID</key> <string>13E2E6B3-D4B9-4E23-888A-524B3ED40C38</string> <key>PayloadVersion</key> <integer>1</integer> <key>SSID_STR</key> <string>SSID</string> <key>EncryptionType</key> <string>WPA</string> <key>Password</key> <string>Password</string> </dict> </array> <key>PayloadType</key> <string>Configuration</string> </dict> </plist>
Replies
0
Boosts
0
Views
997
Activity
Feb ’26
Apple Business Store testing?
We are moving to Apple Business Store for our b2b customers. On the "residential" apple store side there is testflight. What process would one test an app we provide to a b2b customer when using apple business store publishing? (I don't see any sort of test flight for apple business)
Replies
0
Boosts
0
Views
249
Activity
Feb ’26
Individual to Organization Membership 17 days, not completed
I want to know about the time it takes to transition from an individual to an organization with Apple's Developer Program. I received an email notifying me that the transition process would begin on February 2nd, 2026, and today, February 19th, 2026, everything still shows as being in progress without any changes. So I want to know the maximum timeframe or how to know if they are actually completing this process. I have sent two support emails, but received no response.
Replies
0
Boosts
0
Views
266
Activity
Feb ’26
How can I set up a B2B subscription with ABM + MDM + Paywall
I am looking for guidance on how people have solved this problem/use case. What is the best way to structure a seat based subscription app that an organization can pay for seats for all their users, can be distributed via mdm or via app store and is easy (low friction) to get paid for and started for small companies? I market to a business to buy my app, they want it installed on all 25 devices they have. They use ABM to acquire 25 licenses with and MDM to distribute. The app is currently free to download so ABM charges $0 but has a paywall to use. The paywall is a RevenueCat one and no user account is needed. All entitlements and free trial work great. When it is deployed to the 25 devices, they can either sign up with their own AppleId and own/company credit card, or use a company appleid and company card for all 25 devices to solve the issue but neither are great. Doubtful they would want to pay their money for a company required app on a company phone (don’t blame them). If they share an appleid, my MRR drops to 1/25th since they will just share the purchase. Any suggestions would be greatly appreciated.
Replies
0
Boosts
0
Views
248
Activity
Feb ’26
ABM - API - Released Devices
I am working on an internal app for our company that links ABM, Intune, and an AT&T-provided CSV of IMEIs, and I am fairly new to this and using AI (sorry) to help me. I can search for our devices using either the serial # and/or IMEI. If the device has been released, I can still find it using the SN, but not with the IMEI. If a result is returned on a released device's SN, the IMEI is present. I have a list of IMEIs from our AT&T account and want to cross-reference those IMEIs to get the SN. Is there a way to include the Released Devices in the search?
Replies
0
Boosts
0
Views
135
Activity
Feb ’26
Reset Security Question
Hi, Once I try to reset security question, it says: "Your request could not be completed. This action could not be completed due to an error. Please try again later." So I am unable to access account. Please help! Best Regards,
Replies
0
Boosts
0
Views
216
Activity
Feb ’26
Apple Business Manager API
Hello, I am trying to authenticate to the Apple Business Manager API to retrieve device information and ingest it into ServiceNow. I am following the documentation here. The first step is to create an API account and download the private key used to create a JWT client assertion. The guide linked above gives a python script to create a client assertion. Below the first python script, the following description is given for the "kid" variable: "The value is your keyId that returns when you upload a public key." This is the first time that a public key, rather than a private key, is referenced. Where is the public key supposed to be uploaded? Later in the guide, a public key is referenced again, in the section describing the client_id Request parameter: "(Required) You receive your clientId when you upload a public key." I have tried to create a client assertion using the keyId that is associated with the API account. When I try to request an access token, however, I also get an "invalid_client" error back. I am wondering if I'm using the wrong values for both key_id and client_id due to not creating and uploading a public key. Any help would be appreciated, thanks!
Replies
0
Boosts
0
Views
630
Activity
Jan ’26