We would like to use an MDM solution + Apple VPP to distribute a custom application to users, however I would like to limit availability of the app to the device that is under MDM.
From what I understand of VPP, it is tied to an AppleID. This means that if the app is pushed to an MDM-managed iPad beloning to email@example.com (Joe's Managed iPad) then Joe gets the app. But Joe also has an *unmanaged* iphone that he has signed in using the same AppleId - now my app is available on Joe's Unmanaged iPhone as well.
Is there any way to limit app distribution to a specified device, and not all devices available to the AppleId?