Its big advantage is that it moves much of the business logic, compliance, and management from the MDM service to each device. What's new in Apple's Declarative Management process?Īpple unveiled Declarative Management last year as an improvement over its original MDM protocol. This will be a welcome tool in such areas as special education or hospital and healthcare situations where devices may be shared among users with special needs.
In iOS/iPadOS 16, Apple is allowing MDM to enable and configure a handful of the most common features automatically, including: text size, Voice Over, Zoom, Touch Accommodations, Bold Text, Reduce Motion, Increase Contrast, and Reduce Transparency. In fact, many people without special needs also use several of these features. Managing Accessibility settingsĪpple is well known for its expansive set of Accessibility features for people with special needs. This can include provisioning a new device, migrating carriers, use of multiple carriers, or configuration for travel and roaming.
#Manage apple devices software
E-SIM provisioningįor iPhones that support eSIMs, Apple is making it possible for mobile device management software (MDM) to configure and provision an eSIM.
DNS proxy supports system-wide or per-app options while content filtering supports system-wide or up to seven per-app instances. And this requires no changes to the apps themselves. This helps secure traffic for specific apps and functions the same as per-app VPN. With macOS Ventura and iOS/iPadOS 16, Apple is adding per-app DNS proxy and per-app web content filtering. This applies VPN security, but limits VPN load by only sending specific app traffic over a VPN connection. Managed per-app networkingĪpple has long had per-app VPN capabilities, which allow only specific enterprise or work-related apps to use an active VPN connection. Apple also announced Platform Single Sign-on, an effort to expand and streamline access to enterprise apps and websites each time they login to their device(s). The goal here is to make user enrollment easier and more streamlined by requiring users to authenticate only once. The company also announced that support for single sign-on enrollment across its platforms will be implemented after macOS Ventura and iOS/iPadOS16 arrive this fall. (Azure AD was already supported.) These identity providers can be used in conjunction with Apple Business Manager to generate Managed Apple IDs for employees.
The most significant: it now offers support for additional identity providers including Google Workspace and Oauth 2, which allows an expansive set of providers. Identity managementĪpple has made useful changes for identity management in enterprise environments. There's one caveat: devices that require cellular activation or have been activation locked will need that activation to be completed manually before Configurator can be used. This greatly reduces the time and effort needed to enroll these devices.
The big change this year is that Apple expanded the use of Apple Configurator for iPhone to support iPad and iPhone enrollment using the same process - removing the requirement that devices be attached to a Mac. During the setup process, you point an iPhone camera at an animation on the Mac’s screen (much like pairing an Apple Watch) and that triggers the enrollment process. The iPhone incarnation is incredibly simple. It was primary used to enroll Macs that had been purchased outside of Apple’s enterprise/education channel into Apple Business Manager (Apple products purchased through the channel can be auto-enrolled with zero-touch configuration). Last year, Apple introduced a version of Configurator for iPhone that reversed the workflow of the original, meaning an iPhone version of the app could be used wirelessly to enroll Macs into management.
0 kommentar(er)
