Connect Apple Business Manager and Microsoft Intune

Applicable to Administrators

This topic explains how you can connect Apple Business Manager (ABM) to Microsoft Intune MDM to distribute the app licenses purchased on ABM.

Prerequisite

Ensure that you have set the Apple MDM Push Certificate in Microsoft Intune.

Connect ABM To Intune

To connect ABM to Microsoft Intune:

1. Log in to Microsoft Intune as an Administrator.

2. Click Devices.
   

3. In the Device onboarding section, click Enrollment.
   

4. Click the Apple tab.
   

5. Click Enrollment program tokens.
   
   The list of program tokens, if any, are displayed.

6. Click  .
   The Add enrollment program token page appears.

7. In the Basics tab, click the I agree checkbox.
   

8. Download your public key.
   

9. To use the Apple Business Manager, click Create a token via Apple Business Manager.
   
   The Apple Business Console opens in a new window.

10. Against Your MDM Servers, click Add.
    

11. Type an MDM Server Name.

12. Select the Allow this MDM Server to release devices checkbox.

13. In the Upload Public Key section, add the public key downloaded in step 8.
    

14. After the MDM server is created, open it, and click Download Token.
     

15. Return to the Microsoft Intune window and enter your Apple ID. Your Apple ID is the email address that you used to register to your apple manager account.
    

16. Upload your Apple token file that your downloaded in step 14.
    

17. Click Save.

18. On the left-menu, click Profiles.

19. Click Create Profile or choose a default profile.

20. Click Tenant admin > Connectors and tokens.
    

21. Click Connectors and tokens VPP > Apple VPP Tokens.
    

22. Click Open Apple Business Manager.

23. In the resulting new window, click Apple business  > Apps & Books >  Download token.

24. In the VPP Token window:

    1. Specify the Token Name as TeleMessage TM WPA.

    2. In the Apple ID enter your email address used to sign in to the Apple Business Manager.

    3. Upload the VPP token downloaded in step 23.

25. Click Settings > Add scope tags > Create.

26. Return to the Apple Business Manager tab and navigate to the MDM server created.
    

27. On the left-menu, click MDM Server Assignment.

28. In the Default MDM Server Assignment section, select the MDM server that you created from the drop-down for all device types that you wish to manage.

29. Click Done.

30. Return to the main Intune MDM interface and click Apps.
    

31. In the By platform section, click iOS/iPadOS.

32. Enroll devices from MDM and assign them to the desired app from Apple Business Manager.
    

33. Select the app that you wish to add to your organization.
    

34. Under Manage section, click Properties.

35. Against Assignments, click Edit.

    Note

    Ensure that you have already created users, groups or devices to assign the app permissions.

    

36. In the Required section, click Add group to assign the required permissions to your group.
    

37. Click Review + save.
    The purchased app(s) will appear in a list as iOS volume purchase program app.

38. Click All apps > iOS apps > Search.

39. Search for the purchased app and assign it to a device or group.
    The purchased app(s) you selected will be deployed on the devices in about 15 minutes.