Hello,
Thank you for reaching out to Hexnode Connect!
For supervised iPads, apps can be installed silently only when they are deployed using device-assignable Apple VPP (Volume Purchase Program) licenses. You do not need users to sign in with an Apple ID, nor do you need to attach VPP licenses to individual users—the license is simply assigned directly to the device itself.
If the iPads are still prompting for an Apple ID after a VPP sync, it is typically because iOS is falling back to the standard App Store method. This happens if even one app in your Required Apps policy cannot be fulfilled via VPP. Here is the recommended cleanup process to resolve this:
- Remove Native System Apps: Ensure you haven’t added native Apple apps (like Safari, Mail, Messages, or Photos) to your Required Apps policy. These are built into the OS, cannot be purchased via VPP, and will immediately trigger an Apple ID prompt if you attempt to push them.
- Verify License Counts: Navigate to the Apps tab in your Hexnode portal and confirm that every third-party app in your policy has an available VPP license count (e.g., 9/20).
- Re-trigger the Deployment: Once you have removed any native apps and confirmed your VPP licenses, open your Required Apps policy, click Manage > Modify, and save the policy again without making any changes. This action re-triggers the app deployment to your targeted devices.
Regarding your actions being stuck in “Pending”: Apple’s MDM framework does not allow an MDM solution to remotely wake or unlock a device on demand. If the iPads are asleep or locked, actions will remain pending. Simply unlock the affected iPads, keep them awake and connected to the internet, and run a Scan Device action from Hexnode. Once they process the updated policy, your apps will install silently.
I hope this helps streamline your app deployment! Please feel free to reach out if you have any further questions.
Best regards,
George
Hexnode UEM.
What's new 
16 Views
