Learn about Automated Device Enrollment and how to configure it
Apple Push Notification service must be configured in your Kandji tenant before Automated Device Enrollment can be configured.
What is Automated Device Enrollment?
Automated Device Enrollment (ADE) is an Apple feature that helps you automatically enroll devices into Kandji out of the box. This process simplifies the setup and configuration of corporate-owned Apple devices, such as iPhones, iPads, Macs, and Apple TVs, by managing and supervising them as soon as they're activated. In addition to facilitating zero-touch deployment, Automated Device Enrollment helps ensure that organizations retain management of corporate-owned devices throughout their entire lifecycle—even if they are lost or stolen—by forcing them to enroll back into their assigned MDM server each time they're erased or restored.
How Automated Device Enrollment Works
Automated Device Enrollment (ADE) operates through Apple Business Manager (ABM) or Apple School Manager (ASM). When you purchase macOS, iOS, iPadOS, or tvOS devices directly from Apple or an authorized reseller, they are automatically added to your organization's ABM or ASM account.
Some Apple devices can be added to Apple Business Manager or Apple School Manager using Apple Configurator after purchase. Please see our Adding Devices to Apple Business Manager support article for more information.
Once devices are available in ABM or ASM, you can assign them to an MDM server like Kandji. This assignment initiates a sync between Apple and Kandji (handled by the Automated Device Enrollment token), making device serial numbers available in an Awaiting Enrollment status where they can be assigned to an Assignment Map or Classic Blueprint in the Kandji Web App.
When a device is powered on and connected to a network, it checks with Apple to verify organizational ownership, then retrieves and applies the configuration assigned by Kandji.
Configuring Automated Device Enrollment
- In the left-hand navigation bar, click Settings.
- Select the Apple Integrations tab.
- Under Automated Device Enrollment, click Configure.
- Follow the on-screen instructions to set up Automated Device Enrollment and click Done
