Platform compatibility
Prerequisites
- Apple Business account — your organization must have an Apple Business account.
- Identity provider federation — your identity provider (Google Workspace or Microsoft Entra) must be federated with Apple Business so that employees can authenticate with their corporate credentials.
How it works
1
Employee opens Settings on their iPhone or iPad
They tap Sign in to work or school (or go to Settings > General > VPN & Device Management) and enter their work email address.
2
Device contacts the enrollment server
The device performs a service discovery lookup on the email domain and contacts your organization’s enrollment server.
3
Employee authenticates
They sign in with their corporate credentials via your federated identity provider (Google Workspace or Microsoft Entra).
4
Device enrolls automatically
A separate, cryptographically isolated work partition is created. Corporate apps and data live in this partition — personal apps and data remain invisible to the organization.