Enrollment

Apple's Automated Device Enrollment, also known as zero-touch deployment, immediately enrolls and configures a device when a user turns it on. No user interaction with IT is required. This enrollment method is most commonly used for devices owned by your organization and is the only method that can prevent end users from removing the MDM profile.

Apple's Device Enrollment allows users to manually enroll a device with Jamf Pro. This method is designed for institutional devices that are not eligible for Automated Device Enrollment. Device Enrollment is profile-driven or account-driven. For profile-driven enrollment, users and administrators are provided a direct Jamf Pro enrollment URL that opens the enrollment portal in a web browser. For account-driven enrollment, users and administrators can sign in with a Managed Apple Account directly on a computer or mobile device to initiate enrollment.

Apple's account-driven User Enrollment is designed for enrolling personally owned devices with Jamf Pro. Account-driven User Enrollment results in unsupervised devices and allows personal and institutional data on the device to be managed separately. On devices with iOS 15 or later, iPadOS 15 or later, and visionOS 1.1 or later, users open the Settings app, navigate to General > VPN & Device Management, and then sign in with a Managed Apple Account. After sign-in, users are redirected to your organization's Jamf enrollment portal.