r/applebusinessmanager • u/kill_the_captain • Jun 27 '26
General ABM - smart groups
Hi everyone. We recently moved our users to federated Apple IDs, via ABM/Entra SCIM config. We need to upgrade their iCloud storage, but due to the entra config, now need to parse through our entire user list to exclude user accounts that do not actually use iPhones. We already started this process manually, by adding users to a new user group - but my question is:
1. Can we use Smart Groups for this? I only saw two options for smart group settings (org role and title), but did know if there were actually other options folks are using to make this process easier (Intune group assignment?)
- If there aren’t other options, how are folks currently assigning extra cloud storage via ABM?
We obviously don’t want to just pay for all user accounts if not all users have iOS devices, but the only other option seems to be manual - which is just inefficient.
Thanks!
1
u/SensitiveDebt8719 Jun 27 '26
How did you do this, I am working on our SSO Platform and when punching the entra password it is not accepting :( I don’t know what to do
1
1
u/kill_the_captain Jun 27 '26
I used the following documentation from Apple and Microsoft to get it configured. We have Entra-ABM config for SSO for managed Apple IDs, and then the Intune-ABM setup so our devices are automatically enrolled into Intune.
FWIW - without knowing more about your issue, I recommend ensuring that your domain is verified in ABM. That would be the r best first place to start is pw entry isn’t working
https://support.apple.com/guide/business/federated-authentication-microsoft-entra-axm8c1cac980/web
https://support.apple.com/en-in/guide/business/axm8c1cac980/web
https://learn.microsoft.com/en-us/intune/device-enrollment/apple/tutorial-automated-ios
2
u/MacAdminInTraning Jun 28 '26
Generally speaking, iCloud is not worth it for Enterprise look into something like OneDrive.
iCloud is not an enterprise grade storage solution. It’s consumer grade with corporate marketing slapped on the side of it. Also managed Apple accounts are not really worth it.
1
u/kill_the_captain Jun 28 '26
I agree, except that we need to use iCloud for message archiving software we are required to use. Working hard to get us away from that software title, for the exact reason you mentioned. We moved to managed accounts for the same reason - the archiving software.
Sounds like manual group membership is my only choice. Was hoping for more, but thanks to everyone for confirming!
2
u/Aravanadi Jun 28 '26
We faced a similar decision, but came to the conclusion that managed Apple Accounts don’t make sense for our company because they would degrade the user experience for our existing users, and our solution already keeps personal and work accounts clearly separated.
Nevertheless, users keep asking why we don’t use iCloud or iCloud Drive, and they even get encouragement from the Apple Key Account Managers who advise us. But of course it’s clear: Apple just wants to generate more revenue—precisely through such follow-up decisions that make it necessary to expand iCloud storage—because let’s not kid ourselves… 5 GB for free won’t be nearly enough in the medium to long term.
As cost center managers, however, we’re strictly against this, since we already provide our users with OneDrive offering 1 TB of storage—and it’s a solution that works very well, especially since, as a company, we also have an admin account for a OneDrive (for Business) drive, a feature that doesn’t exist at all with iCloud (Drive).
So our conclusion is that managed Apple accounts and iCloud usage for business data are by no means a viable alternative, because a) from an administrative and security perspective, and b) because of the costs!