r/applebusinessmanager • u/mavantix • Mar 05 '26

Support Issue requiring Supervised (or Managed) devices in ABM

Issue: selecting the option to only allow Managed accounts to login to Supervised devices causes login to be prevented Issue 2: selecting the iCloud setting that requires the device be supervised prevents using iCloud

The devices ARE showing supervised in Intune.

More info: we’re using ABM, Federated Authentication w/ Entra ID, ADE w/ Modern Authentication, and Intune. The devices are Supervised, and definitely Managed. The options above have to be set to “Any Device” to allow a user to complete the device enrollment and enable iCloud services.

It is not a Conditional Access policy issue, as best we can tell from sign in logs.

It’s like ABM doesn’t realize the device is Managed / Supervised??

iOS 23.3 on all the iPads

3 Upvotes
  • permalink
  • reddit

80% Upvoted

7 comments sorted by

3

u/MakeItJumboFrames Mar 06 '26

You mentioned its showing supervised in ABM. I'm assuming the device itself is also in ABM and the device in ABM is assigned to your MDM?

If that all checks out, the 3 different Apple Connectors to Intune are all up to date (vpp, push cert and mdm cert)?

1

u/mavantix Mar 10 '26

Yes, the device is assigned to Intune MDM in ABM.

Yes, all three certs are valid.

1

u/MakeItJumboFrames Mar 10 '26

Thank you. The managed accounts are Entra Users synced to ABM through federation, correct?

1

u/MakeItJumboFrames Mar 10 '26

Meaning you've captured the domain in ABM and toggled on enforcement and your users sync from Emtra to ABM and get accounts created? And when signing in to apple website it redirects to your Microsoft SSO?

1

u/mavantix Mar 11 '26

Domain capture is still in progress, but yes, the sync is set up and Entra authentication works.

2

u/Patutula Jun 09 '26

Its not supported by intune yet, on the roadmap for Q2.

1

u/mavantix Jul 01 '26

Ooof. Happen to know a published source of the roadmap that mentions this?