Google Workspace authentication fails during iOS ADE/DEP enrollmentSolved

Participant
Discussion
2 weeks ago Jun 06, 2026

I’m trying to enroll a new iPhone through Apple automated enrollment, but the device won’t let me authenticate with Google Workspace during setup. I also tried switching the enrollment profile to no authentication, but the setup screen still seemed to show the Google authentication option for a while. Is Google authentication supported for iOS ADE/DEP enrollment, or should I use another enrollment profile?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
2 weeks ago Jun 06, 2026
Marked SolutionPending Review

Hi @ezekiel,

For iOS devices enrolled through Automated Device Enrollment, Google Workspace authentication may not work during the enrollment flow. This is due to a Google Workspace restriction related to the minimum security level required for the browser or webview used to load the Google sign-in page during setup.

To complete enrollment, use one of these approaches:

  1. Disable authentication in the ADE enrollment profile and enroll the device without user authentication.
  2. Use another supported authentication method, such as a local Hexnode user, if user authentication is required during enrollment.

After the device is enrolled, you can assign it to the correct user by using the Change owner action from the Hexnode portal.

Regards,
Sienna Carter
Hexnode UEM

Marked SolutionPending Review
Participant
2 weeks ago Jun 06, 2026
Marked SolutionPending Review

I switched the ADE enrollment profile to one without authentication and the iPhone enrolled successfully. Does it matter if this was not our usual default enrollment profile?

Marked SolutionPending Review
Hexnode Expert
2 weeks ago Jun 06, 2026
Marked SolutionPending Review

Hi @ezekiel,

That should be fine. The important part is that the enrollment profile allows the device to complete setup without relying on Google Workspace authentication.

Once the device is enrolled, you can update the ownership in Hexnode so the device is mapped to the correct user and domain. If you want to continue using your usual ADE profile, edit that profile’s authentication method accordingly and sync the ADE settings before enrolling additional devices.

Regards,
Sienna Carter
Hexnode UEM

Save