Greetings, As our company grows, we created an Apple Business Manager account to better manage company devices and staff iCloud accounts. Business Manager detected there are pre-existing Apple IDs using our domain and offers to reclaim their usernames. Among those: our developer accounts which are used to manage and publish our apps. Business Manager says that reclaiming the usernames will invite the users to pick a new username. My questions, to anyone having experience or knowledge on the matter: Is there any chance that we find ourselves locked out of our Developer Account? Is there any recommendation against reclaiming the developer account addresses? Thank you in advance for any insights and suggestions. (Sadly, Business Manager does not allow picking which usernames to reclaim individually. It is an all or nothing kind of situation. It does not even list the usernames, merely the total count of them)

Hi, My app is free-to-download but with an in-app purchase to unlock all the features for example. I use Intune/VPP program and ABM for deploy it to all my users. Can i manage in-app purchare also with Intune/VPP ? Thanks, Benoit

Hello, We are implementing Apple Business Manager in our organization. Previously, we had personal Apple accounts with our domain, and when synchronizing our Apple Business Manager account with Azure AD, we identified several conflicting accounts. The system suggested notifying users to switch from their personal accounts. Is there a way to transfer these accounts to Apple Business Manager without the need for a switch? If not, what are the recommendations for our scenario? We appreciate the assistance!

Hello! We already have a public app on the AppStore. And we are trying to create another app to distribute to organizations privately. Now, we did some digging and have some queries about the whole process which are as follows: What type of account do we need as the developer team, meaning which programs we need to enroll to and what type of account does our customer organization need to use the app, privately? We do not have a hundred or more employees which is an eligibility criterion for enrollment in the Enterprise Program. How can we proceed to distribute apps to organizations privately with out situation? Do the customer organizations need Enterprise account for each app we publish? Thanks!

Hi, I would like to add custom app inside ABM, but i can only upload pkg. which is not enough for what i need. Installation has some flags for install, like: #sudo curl -so wazuh-agent.pkg https://packages.wazuh.com/4.x/macos/wazuh-agent-4.5.3-1.arm64.pkg && sudo echo "WAZUH_MANAGER='wazuh.domain.com'" > /tmp/wazuh_envs && installer -pkg ./wazuh-agent.pkg -target / #sudo /Library/Ossec/bin/wazuh-control start How to make this work? thank you

How to Re-sign a ipa file with our apple account and install on physical device for testing , as apps like BrowserStack does, Thanks.

We are creating our own server for MDM, we followed apple suggested approach with following link [https://it-training.apple.com/tutorials/deployment/dm055] After uploading .pem file in ABM portal, new server token is generating but my question is where we need keep that server token(.P7M) in our servers...is there any specific path we have...if we gone through apple documents they are suggesting to follow vendor documentation but in my case we did't take any third party server's...so we don't have any vendor document. Can you please help me to achieve this scenario.

Having trouble in signing in to iCloud when a managed supervised iPhone is restricted with few apps using “allowListedAppBundleIDs” restrictions key. Only iPhone has this trouble, this issue is not reproducible in iPad. Even after entering the Apple ID and password, the account seems to be not logged in. Have attached screenshots for reference. Tested device iOS Version : 17.1 Kindly explain this behaviour. Feedback ID : #FB13318247 - Sysdiagnose logs attached here.

The iphone info: OsVersion: iOS 15 Device model: iphone 12 Steps: Install the MDM profile on the iphone. The server pushes the command to install the webclip profile through MDM (the profile is set to not be manually removable). After installing the webclip profile, the webclip icon will appear on the Home Screen of the phone screen. When the webclip is no longer used, remove the webclip profile through MDM. The problem occurs in step 4, the webclip profile is deleted, but the webclip icon still exists on the home screen of the mobile phone, and cannot be removed by tools such as Apple Configurator2. So what causes this phenomenon and how to fix?

Are the codes generated by the business portal always limited to the country in which the DUMS code is registered? I have clients who have only one office and therefore can request only one DUMS code but have employees in various countries. How can I generate codes, from the business portal, valid for all countries? Has it become possible to do this? What alternatives can I evaluate for distributing a private app?

My app was set to Private and Organization ID was correct. Why my app isn't show on Custom App menu. And when I click "Get Started" button on Custom App, nothing happen. My App Store ID and Apple Business Manager ID are not of the same account.

Hi everyone, We have developed an application for a large company and are distributing it using a business account. We have codes that we give to users. The problem is that we released an update for the same app, but users aren't receiving the update automatically as it should be. It's not working. So, we are giving new codes to users as if they are installing a fresh version. We have contacted Apple, but we haven't received any answers (the suppport its a nightmare mostly people just saying they dont have acess to our ticket case) Has anyone else experienced this problem? And does anyone have a solution for this? Thanks.

Hi, I'm trying to confirm if there is an API that can be used to interrogate ABM for device info? It holds our enterprise devices and so want to regularly extract a list of all devices along with associated information, and import these into a corporate system. It's unclear from the documentation if this can be done. This is the closest I can find but implies it must be done from within another (developed) app...? TIA.

When we specified a "Unlisted app" by InstallApplication(MDM command), the response state is NeedsRedemption. This is the request and response. ■Request <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>dd3fe1a1-a1a7-4987-8201-447e815bd6f9</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>Attributes</key> <dict> <key>Removable</key> <false /> </dict> <key>Identifier</key> <string>******</string> <key>ChangeManagementState</key> <string>Managed</string> <key>InstallAsManaged</key> <true /> <key>ManagementFlags</key> <integer>4</integer> </dict> </dict> </plist> ■Response <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>dd3fe1a1-a1a7-4987-8201-447e815bd6f9</string> <key>Identifier</key> <string>******</string> <key>State</key> <string>NeedsRedemption</string> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00008110-001E74C814EA401E</string> </dict> </plist> I think non-VPP apps don't need redemption codes. Is there a way to install "Unlisted app" without using a redemption code?

We currently have a Developer Account registered as an organisation and publish our app to App Store. One of our customers want our App to be part of their MDM, so that they can distribute it to their employees without App Store. Questions: What are the steps to make our App available to Client's MDM solutions like Microsoft Intune ? Will this be achieved by having Apple Developer Program (Account) or any other steps are involved ? Will the solution be applicable to multiple Clients using their own different MDM solutions ?

When I execute the InstalledApplicationList(MDM command), A part of the response is Incorrect. TikTokLite is not a managed app according to the later methods. This is the request and response. ■Request <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>Command</key> <dict> <key>ManagedAppsOnly</key> <true /> <key>RequestType</key> <string>InstalledApplicationList</string> </dict> <key>CommandUUID</key> <string>8dffac1f-55df-40b1-8c69-414dfb8aedac</string> </dict> </plist> ■Response <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>8dffac1f-55df-40b1-8c69-414dfb8aedac</string> <key>InstalledApplicationList</key> <array> <dict> <key>AdHocCodeSigned</key> <false /> <key>AppStoreVendable</key> <true /> <key>BetaApp</key> <false /> <key>BundleSize</key> <integer>12525568</integer> <key>DeviceBasedVPP</key> <false /> <key>DynamicSize</key> <integer>12288</integer> <key>ExternalVersionIdentifier</key> <integer>858324287</integer> <key>HasUpdateAvailable</key> <false /> <key>Identifier</key> <string>net.skyseaclientview.mdm</string> <key>Installing</key> <false /> <key>IsAppClip</key> <false /> <key>IsValidated</key> <true /> <key>Name</key> <string>SKYSEA MDM</string> <key>ShortVersion</key> <string>1.1.182200</string> <key>Version</key> <string>36</string> </dict> <dict> <key>AdHocCodeSigned</key> <false /> <key>AppStoreVendable</key> <true /> <key>BetaApp</key> <false /> <key>BundleSize</key> <integer>266919936</integer> <key>DeviceBasedVPP</key> <false /> <key>DynamicSize</key> <integer>15335424</integer> <key>ExternalVersionIdentifier</key> <integer>858769767</integer> <key>HasUpdateAvailable</key> <false /> <key>Identifier</key> <string>com.ss.iphone.ugc.tiktok.lite</string> <key>Installing</key> <false /> <key>IsAppClip</key> <false /> <key>IsValidated</key> <true /> <key>Name</key> <string>TikTokLite</string> <key>ShortVersion</key> <string>29.3.16</string> <key>Version</key> <string>2931603</string> </dict> </array> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00008120-000C28DC0AB8C01E</string> </dict> </plist> ・TikTokLite does not appear in the "Mobile Device Management App" in the iPhone's Settings app. Is this right? If this is expected response, Is there a way to judge that the app is a managed app? This is the Device information. <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>31317d47-355c-40cb-ad72-3bff6c57989b</string> <key>QueryResponses</key> <dict> <key>AvailableDeviceCapacity</key> <real>112.608231424</real> <key>BatteryLevel</key> <real>0.97999999999999998</real> <key>BluetoothMAC</key> <string>***</string> <key>BuildVersion</key> <string>20F66</string> <key>CellularTechnology</key> <integer>1</integer> <key>DataRoamingEnabled</key> <false /> <key>DeviceCapacity</key> <real>128</real> <key>DeviceName</key> <string>***</string> <key>EASDeviceIdentifier</key> <string>***</string> <key>IMEI</key> <string>***</string> <key>IsActivationLockEnabled</key> <true /> <key>IsCloudBackupEnabled</key> <true /> <key>IsDeviceLocatorServiceEnabled</key> <true /> <key>IsDoNotDisturbInEffect</key> <false /> <key>IsMDMLostModeEnabled</key> <false /> <key>IsRoaming</key> <false /> <key>IsSupervised</key> <false /> <key>Model</key> <string>MQ983J</string> <key>ModelName</key> <string>iPhone</string> <key>ModemFirmwareVersion</key> <string>1.70.02</string> <key>OSVersion</key> <string>16.5</string> <key>PersonalHotspotEnabled</key> <false /> <key>ProductName</key> <string>iPhone15,3</string> <key>SerialNumber</key> <string>***</string> <key>SubscriberMCC</key> <string></string> <key>SubscriberMNC</key> <string></string> <key>UDID</key> <string>00008120-000C28DC0AB8C01E</string> <key>VoiceRoamingEnabled</key> <false /> <key>WiFiMAC</key> <string>***</string> <key>iTunesStoreAccountHash</key> <string>***</string> <key>iTunesStoreAccountIsActive</key> <true /> </dict> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00008120-000C28DC0AB8C01E</string> </dict> </plist>

Problem Description: We are using manageVPPLicensesByAdamIdSrv API for assigning licenses for serial numbers. We get "Internal error - 9603" response for this API when assigning the API for valid adamID of an app. When using the same API other apps, this issue doesn't occur. AdamID: 720111835. The license is assigning properly for the same app in VPP License Management 2.0.0 + - Associate Assets API. Currently, we will not able to the new API. We overcame this issue by creating a new location token in the same organization and purchasing the same app in it and using it to assign the license to device for the same app which is successful. Kindly help us with this issue. Request: {"pricingParam":"STDQ","disassociateSerialNumbers":["SAMPLESERIAL"],"adamIdStr":"720111835","sToken":"********************","notifyDisassociation":false} Response: {"errorMessage":"Internal error.","errorNumber":9603,"status":-1}