Apple's Automated Device Enrollment, also known as zero-touch deployment, immediately enrolls and configures a device when a user turns it on. No user interaction with IT is required. This enrollment method is most commonly used for devices owned by your organization and is the only method that can prevent end users from removing the MDM profile.
Integrating Jamf Pro with Automated Device Enrollment involves the following steps:
Download a public key (.pem) file from Jamf Pro.
Obtain a server token file (.p7m) from Apple.
Upload the server token file to Jamf Pro.
You can repeat this step to create multiple Automated Device Enrollment instances in Jamf Pro.
Jamf Pro automatically syncs and displays Automated Device Enrollment updates from Apple every two minutes.
Up to a two minute syncing delay may occur, which can cause outdated Automated Device Enrollment to display in Jamf Pro. Additional environment-specific factors can affect the syncing between Jamf Pro and Apple.
Deleting an Automated Device Enrollment instance removes the integration from Jamf Pro but does not delete the settings in Apple School Manager or Apple Business Manager.