This lab comprises two modules that delve into two integration points between Workspace ONE UEM and Apple Business Manager. The first module concentrates on Automated Device Enrollment, while the second module explores Apple’s Volume Purchase Program. A third optional module explores the distribution of public and internal applications.

In this module, you will review the existing default device enrollment profile configured in your lab environment, and then create a new device enrollment profile.

To review the existing default enrollment profile:

1. In the Workspace ONE console, click Groups & Settings.

2. Select All Settings.

3. Expand Devices & Users and then expand Apple.

4. Click on Automated Device Enrollment.

5. The Default Enrollment Profile has been configured in a parent OG, and is therefore not editable by you in your lab environment. However, you can view the profile by clicking on the View button.

6. Scroll through the profile settings. Note the MDM features that are enabled, such as Supervision and Lock MDM Profile. Also review the Setup Assistant options that have been configured.

7. Click Close.

To create a new Automated Device Enrollment profile:

1. On the Automated Device Enrollment screen, click the Add Profile button.

2. Custom enrollment delivers a fully customized experience to users during enrollment. Set Custom Enrollment to Off.

3. Set Authentication to On.

4. From the dropdown, select Corporate - Dedicated for Device Ownership Type.

5. Ensure that your OG is listed in Device Organization Group. Your OG name will be student{labid}.

6. For Profile Name, enter New Enrollment Profile.

7. Enter IT for Department, and 123-456-7890 for Phone Number.

8. Leave all other settings at the defaults.

9. Click Save.

10. You will notice that the new enrollment profile is now listed on the Automated Device Enrollment screen. Unlike the default enrollment profile, the new profile you just created is editable.

An Apple Business Manager (or Apple School Manager) location is a container that ties a set of books and apps to one or more content managers. Each location has a token that can be uploaded to Workspace ONE to allow App and Book management within the Workspace ONE UEM organization group. The token provides the credentials by which Workspace ONE authenticates to Apple Business Manager to sync assets and manage license assignments.

In this exercise, you will upload the above mentioned token into your Workspace ONE lab environment to configure Apple's Volume Purchase Program.

To configure Volume Purchase Program:

1. In the Workspace ONE console, click Groups & Settings.

2. Select All Settings.

3. Expand Devices & Users and then expand Apple.

4. Click on VPP Managed Distribution.

5. Select Override.

6. For Description, enter Volume Purchase Program.

7. If you have not done so yet, download the above linked token file to your desktop device.

8. Click the Upload button.

9. Select Choose File and browse to the downloaded token file.

10. Select the token file and click Open.

11. Click Save.

12. On the VPP Managed Distribution screen, click Save.

13. The integration between Workspace ONE UEM and Volume Purchase Program is complete.

To sync apps from Volume Purchase Program:

1. In the Workspace ONE console, click Resources.

2. Select Native Apps.

3. In the List View, select the Purchased tab.

4. Click the Sync Assets button.

5. At the prompt, click Ok.

6. If you do not see your apps immediately, click the Refresh button, which is next to the Layout menu in the Workspace ONE console.

7. Once the sync has completed, you should see apps for iOS and macOS in the List View.

Device-based licensing assigns an application or content to a device serial number, necessitating a license for each device. Licensing for most applications can be transitioned from user-based licensing to device-based licensing with a few simple mouse clicks. Unlike user-based licensing, end users are not required to acknowledge the Volume Purchase Program terms of acceptance.

To transition an app to device-based licensing:

1. In the Workspace ONE console, click Resources.

2. Select Native Apps.

3. In the List View, select the Purchased tab.

4. Select the iOS app, Keynote.

5. From the More Actions dropdown menu, select Enable Device Assignment.

6. When prompted to confirm the action, click Ok.

7. Click on the name for the iOS app, Numbers.

8. On the License Info tab, click the Enable Device Assignment button.

9. When prompted to confirm the action, click Ok.

10. Click Save & Assign.

11. You will assign the app to an assignment group in the next task. Click Cancel, and then click Save.

The distribution of applications and content is managed through Assignment Groups, enabling organizations to include or exclude devices from receiving assigned apps and content. Assignment Groups within Workspace ONE UEM are customizable entities that define which platforms, devices, and users are assigned specific applications, books, compliance policies, or device profiles.

To assign an app to an assignment group:

1. In the Workspace ONE console, click Resources.

2. Select Native Apps.

3. In the List View, select the Purchased tab.

4. Select the iOS app, Keynote.

5. Click the Assign button.

6. Enter iOS Keynote App in the Name field.

7. Click the assignment group dropdown and select Corporate-owned iOS Devices.

8. Enter 10 in the Allocated field.

9. Set App Delivery Method to Auto.

10. In the left column, click Restrictions.

11. Ensure that Remove on Unenroll and Prevent Application Backup are both enabled.

12. Click Create.

13. Click Save.

14. Click Publish.

15. A notification might appear on your device about the pending app installation. Click Install.

Workspace ONE UEM categorizes applications into three types: Internal, Public, and Purchased. We’ve already discussed purchased applications from the VPP. Internal applications are internally developed and can be directly uploaded to the Workspace ONE UEM console or imported from an external app repository. Public applications are available on the respective app stores of the platforms, such as the App Store, Play Store, Windows Store, and so on.