Brendon
Baxter

Is Apple Business Manager a replacement for MDM?

Brendon Baxter

Aug 18, 2023

9 min read

Towards the end of the last decade, zero-touch device management gained a lot of popularity and zero-touch deployment was a huge deal back then. Apple already had a zero-touch deployment method of its own called the Device Enrollment Program (DEP). Apple also had an app procurement and deployment service Volume Purchase Program (VPP). But in 2018, Apple decided to club these two services together to form an all-in-one deployment and provisioning service called Apple Business Manager or ABM.

ABM simplified the whole process of device management. But ABM alone was not enough to manage Apple devices. In this blog we’ll see what Apple Business Manager is, how it helps to manage Apple devices, the relationship between ABM, and Mobile Device Management (MDM) tools and much more.

Explore Hexnode’s Apple device management capabilities

What is Apple Business Manager?

Many people think that ABM is an MDM, but it couldn’t be any further from the truth. ABM indeed helps to manage devices, but it cannot perform every function required to manage Apple devices effectively. So, what is ABM? Here is the answer. ABM is an online service provided by Apple to enroll and configure devices as well as assign them to users in an organization. You can also buy and distribute apps to devices in bulk using ABM. As the name suggests, ABM is perfect for businesses that provide Apple devices as work devices.

ABM is certainly not a replacement for MDMs, but it does simplify certain aspects of device management. As mentioned above, deployment is an area where Apple Business Manager can help organizations the most. Once your organizational ABM account is set up, you can automate the device enrollment into mobility management tools.

Apple devices bought directly from Apple, or any authorized reseller will be automatically added to the ABM portal once the customer ID or reseller number is registered in the ABM portal and from there you can set up an MDM server so that the devices will be automatically enrolled in the mobility management solution of your choice. Just like with VPP, you can buy app licenses and books from App Store in bulk and distribute them to organizational devices.

How does Apple add devices to ABM?

Apple adds devices to your ABM portal by keeping track of device purchases made by your organization using authorized channels. You have to add your Apple Customer Number and/or also the authorized reseller’s Reseller number if you purchased the devices from them. The reseller has to verify your Organization ID and if the details are okay, the devices will be added to the ABM portal.

Apart from these two major features, you can create and control Managed Apple IDs using ABM. These corporate IDs can help separate work data from personal data and secure sensitive information on organizational devices as well as personal devices. Businesses can even make use of Apple at Work’s own Single Sign-On to secure access to company apps and resources.

Your must-haves to get started with Apple Business Manager

Before you can start deploying devices using ABM you have to set up an ABM account and enroll your organization in the ABM portal. Once that is done, you are ready to deploy devices to users, enroll them in MDMs and deploy apps and books in devices. Here is what you need to enroll your organization in ABM:

  • You need an administrator account and a verification contact. The administrator account will be in charge of the organization’s ABM account, and you can give 4 more accounts administrative privileges. The verification contact will be responsible for verifying the details of the initial admin account. This representative will be contacted during the initial setup process.

There are a few prerequisites for the initial administrator account and the verification contact. The work email address of the admin should not be associated with iTunes, iCloud, or any other Apple service before and after the initial setup. The person in possession of the verification contact details should be authorized to sign the agreement and terms of Apple Business Manager on behalf of the organization. Last but not least, the admin account holder and verification contact should not be the same person.

  • You have to be ready with organizational details like the D-U-N-S number of the organization, website address, phone number, language, time zone, and the Apple customer number or reseller ID used to purchase the devices that will be added to Apple Business Manager.

How to enroll your organization in Apple Business Manager

Once you have all the details mentioned in the section above, you can follow the steps below:

  • You can go to business.apple.com and click on “Sign up now”.
  • Provide the details as prompted and select the time zone.
  • Provide the initial admin account credentials and the verification contact details. Finally, review and submit.
  • You will receive an email once everything is set up saying that the enrollment is in review. The Apple team will get in touch with the verification contact during the review period to verify the details provided.
  • Once verified, the contact will be emailed to confirm if the choice of initial admin is final, and if not there will be an option to change the admin.
  • After the verification process is completed, open the email account of the admin and check for mail from the Apple team.
  • Open the mail and click on the “Get started” button.
  • Create a new Managed Apple ID and then proceed with the on-screen instructions. Voila, you have set up Apple Business Manager for your organization.

Best buddies: ABM and MDM

Since both have a few similarities, people might think ABM and MDM are interchangeable. But Apple Business Manager is not a replacement for MDM nor is MDM a replacement for ABM. MDM and ABM work best when they are together. As I mentioned earlier, it is possible to connect MDM servers to the ABM portal so that, you can assign devices to the MDM server. This way, devices will be enrolled in the MDM as soon as it is switched on and connected to the internet.

But I can enroll my Apple devices in an MDM even without ABM, then why should I use it? This is a question at least some people will have. For starters, if you enroll your devices using ABM, there won’t be a need to manually set up the device. The device will be all set to use right after it is switched on. Apart from that, you can supervise the Apple device when it is enrolled using ABM. Supervision opens up a lot of possibilities for MDMs in terms of device management.

Any device management features that your ABM portal is unable to provide can be configured via an MDM. Also, you can monitor devices in real-time and create reports on devices and users to make sure that everything is going smoothly. You can also meet regulatory compliance standards using an MDM like Hexnode. Last but not least, MDM can mitigate the consequences of lost or stolen devices much more efficiently.

Why use Hexnode and Apple Business Manager together?

Okay, now you are equipped with the information on what Apple Business Manager is, how to set it up, and why ABM works well together with an MDM solution. But which MDM is the best? Well, if you haven’t already made up your mind, here is why you should consider Hexnode.

Featured resource

Mastering ABM and ASM: The complete handbook

Learn about all the different features available in ABM and ASM and the benefits of pairing these platforms with a UEM solution like Hexnode.

Download the white paper

Just like any other MDM that supports Apple devices, Hexnode also offers integration with ABM enabling seamless and easy device deployment. Apart from taking advantage of Apple Business Manager’s features, Hexnode offers a lot more. Here are some of the key things Hexnode offers in terms of Apple device management:

  • You can monitor and manage data usage on mobile devices using Hexnode’s Telecom expense management feature.
  • Hexnode makes the whole process of inventory management easier by providing real-time data on all devices in the organization.
  • You can secure and protect devices effectively with Hexnode’s security features. You can enforce strong passwords and device encryption, configure certificates, and set up business containers on Apple devices.
  • Hexnode’s location tracking abilities make managing and recovering lost devices much easier.
  • You can filter content and apps using Hexnode’s allowlisting and denylisting features.
  • Device monitoring and troubleshooting is one of Hexnode’s strong suites. With features like remote view and device summary, IT admins can constantly monitor devices and make sure that devices are working as they should.
  • You can enforce corporate policies on devices and make sure that compliance standards are met using Hexnode.
  • Hexnode lets you schedule OS updates on devices.

In conclusion

While Apple Business Manager offers streamlined device deployment and management, it is not a direct replacement for Mobile Device Management (MDM). ABM excels when used together with an MDM solution, forging a solid combination that maximises management and efficiency. By integrating Hexnode with Apple Business Manager, you harness the power of both tools, enabling seamless device management, enhanced security, and comprehensive oversight. Take advantage of the ABM and MDM partnership to maximize the effectiveness of your device management strategy and boost productivity throughout your company.

Share

Brendon Baxter

Product Evangelist@Hexnode. Read. Write. Sleep. Repeat.

Share your thoughts