Since a few days my Apple Business Manager Enterprise App in Azure was quarantined. I had no configuration changes, it just suddenly stopped. I have two groups which contain the users I want to sync. It seems it cannot use groups at all anymore. If I assign users directly it will work. But that's very inconvenient for us. Was there any change lately to explain why this does not work anymore?
Group
User
So not sure if this is related but, I am testing our Apple Business Manager Federated Authentication with Microsoft on my test tenant. I did this a couple of months ago.
How that process went in the past:
Now, I did this recently and no SAML was created. Instead, a new Apple Business Manager app was generated that utilizes Open ID Connect (OIDC). I am not able to provision specific users or groups. It now syncs everything in my domain (service accounts, etc).
So in your case, it might not be syncing because Apple is now wanting us to use the OIDC method?
Apple changed some stuff recently. I called support and they did confirm something was modified. Even this article shows a timestamp of June 2024 when it was last edited. I do not remember seeing any OIDC stuff before.
So not sure if: Apple did something wrong or if Microsoft implemented the Enterprise app in their catalog wrong.
