You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

multiple ABM managed iPads - appleid practicality limitations

What is the suggested strategy for ABM managed appleids on multiple iPads in the following scenario?


50+ devices for seminar / display booth / product demonstration use - all will have same MDM profile and are not allocated to specific users.


approach 1) using the same ABM managed appleid for multiple devices is possible but becomes impractical due to verification requests, repetitive notifications and SMS verification limits

A device has been added to your appleid x N-1 times on N devices after ios updates

Verification code has been sent to "one of your devices" - go find which device

Too Many Codes Sent - limit easily reached


approach 2) maintaining unique ABM managed appleids for each device becomes unwieldy and also runs into limitations on appleids per phone number. The IT dept has limited mobile numbers.


iPad (10th generation)

Posted on Dec 7, 2024 6:06 AM

Reply
Question marked as Top-ranking reply

Posted on Dec 7, 2024 7:07 AM

Yikes.


"50+ devices for seminar / display booth / product demonstration use - all will have same MDM profile and are not allocated to specific users"


Why are you using Apple IDs at all!?!? If these units are being used by random people in a public space for demo purposes, then deliver your apps via VPP, hand the units out like candy, and then wipe at the end of each session to reset to defaults.


The only reason I can think of the need for Apple IDs is that your app/product uses iCloud storage and you need an Apple ID to participate in the cloud storage. If this is the case, then consider setting up shared iPad and treat the IDs as students. This will by pass the need for MFA unless you Federate to an identity provider (which would be foolish because you would be granting access to your corporate domain).


But I return to the first point. Why do you need Apple IDs? You are giving strangers passwords or at worst you are maintaining a password list and worrying about MFA (as you stated). But, what if one of your participates creates content in the Apple ID? Wow, what a potential nightmare. That will still be there when the next person uses that ID.


Volume license all your apps in ABM and deliver them to the devices. No Apple ID. Hand the device out with a no PIN code and restrict the ability to create one. Use your MDM to tailor the device by aggressively using restrictions. When the event is over, wipe and reset to make sure no one did something inappropriate on the device (for example, BLOCK the camera if you don't need it for your app - you will be surprised by how inappropriate professional adults can be).


Hope this helps. Unless you are demoing an EDU product or an app that is storing data in Apple's iCloud, avoid IDs like a swarm of bees (reference to when Apple had a sense of humor and posted a Kbase article with this sentence: 'Stay away from the SyncServices folder as if it were a swarm of bees...').



5 replies
Question marked as Top-ranking reply

Dec 7, 2024 7:07 AM in response to tdes-john

Yikes.


"50+ devices for seminar / display booth / product demonstration use - all will have same MDM profile and are not allocated to specific users"


Why are you using Apple IDs at all!?!? If these units are being used by random people in a public space for demo purposes, then deliver your apps via VPP, hand the units out like candy, and then wipe at the end of each session to reset to defaults.


The only reason I can think of the need for Apple IDs is that your app/product uses iCloud storage and you need an Apple ID to participate in the cloud storage. If this is the case, then consider setting up shared iPad and treat the IDs as students. This will by pass the need for MFA unless you Federate to an identity provider (which would be foolish because you would be granting access to your corporate domain).


But I return to the first point. Why do you need Apple IDs? You are giving strangers passwords or at worst you are maintaining a password list and worrying about MFA (as you stated). But, what if one of your participates creates content in the Apple ID? Wow, what a potential nightmare. That will still be there when the next person uses that ID.


Volume license all your apps in ABM and deliver them to the devices. No Apple ID. Hand the device out with a no PIN code and restrict the ability to create one. Use your MDM to tailor the device by aggressively using restrictions. When the event is over, wipe and reset to make sure no one did something inappropriate on the device (for example, BLOCK the camera if you don't need it for your app - you will be surprised by how inappropriate professional adults can be).


Hope this helps. Unless you are demoing an EDU product or an app that is storing data in Apple's iCloud, avoid IDs like a swarm of bees (reference to when Apple had a sense of humor and posted a Kbase article with this sentence: 'Stay away from the SyncServices folder as if it were a swarm of bees...').



Dec 9, 2024 7:32 PM in response to tdes-john

If these were only Macs... You could deliver the sample data as a package during enrollment. I am guessing this is in the Files app?


If you were distributing your sample data in eBook format, your MDM can (should be able to) deliver those. But not random data files.


You could use Apple Configurator. There is a feature in there to install documents (but it must be associate to an app so if this is mixed content that is a bad idea). And that would be a clunky deployment and likely would only be effective if you had a big USB hub of a docking station so you can run the old school Configurator MDM.


How about AirDropping your data when you are prepping the devices? When you consider the workflow you are using, you are already touching each device to log into an Apple ID to make the data available. Might it be easier to simply AirDrop the files to each device. You are still touching them all, but you are no longer using any credentials to sign into the device.


Or, and again, I am assuming you are storing the sample files in the Files app, how about this :). You collect all your sample files into a zip archive. Post the zip archive on your web site. Then you can deploy a Web Clip to the devices so now you launch the web clip, which will download the zip. Unzip the archive in the Files app and now all your content is on the device. No credentials.


Hope this is helping, not confusing. You have an interesting challenge with the batch of sample content.





Dec 9, 2024 6:26 PM in response to Strontium90

Thanks for your reply @strontium90, I appreciate your suggestions and will follow up, especially at future events some of which have less monitoring of the participants. At this particular event the iPads will remain fixed in place and in view at all times.


The reason for the appleid was indeed to deploy demo content to the devices via icloud in advance and reduce reliance on paid wifi at the venue. The content is static content so once it is copied locally onto the iPads, the appleid can be removed. As you say, no appleid, no verifications.



Dec 9, 2024 10:51 PM in response to tdes-john

MDM solution such as JAMF, Scalefusion Apple MDM is configured to handle the specific needs of your deployment. This includes setting up profiles that minimize the need for Apple ID interactions and automating as much of the setup process as possible:


Check this : https://www.reddit.com/r/applebusinessmanager/comments/ypru3v/noob_to_apm_managed_apple_id_question/.

Dec 13, 2024 3:17 AM in response to Strontium90

Event conducted and iPads performed well! Appleids were logged out and it didnt seem to trigger any problems.


The content was a mix of videos, pdfs and images which were pre-deployed as files ~ 2.5G onto each device. I like the zipped web clip idea - will definitely try that in future. In the past found that Configurator bogs the iMac down when >4+ iPads connected, found optimal load was 2 at a time.


Thanks again for your response, those login verifications were a worry i couldn't see around.


avagoodweekend!


multiple ABM managed iPads - appleid practicality limitations

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.