Federated Apple ID sign-in fails on managed iPad with "account does not support services enabled" errorSolved

Participant
Discussion
6 months ago Apr 09, 2026

Hi everyone. I’m stuck on an issue with a Hexnode-managed Shared iPad. When users try to sign in using their Federated Apple ID, the login fails with the error: “account does not support services enabled.” Since it’s a Shared iPad, we can’t bypass the login screen without an Apple ID.

I have already tried this across multiple devices and accounts, verified all device policies and shared iPad settings in the Hexnode portal, and even factory reset and re-enrolled the iPad. Interestingly, Personal Apple IDs work perfectly fine. However, Federated accounts and even the ABM Super Admin email trigger this error, despite “Allow Managed Apple Account on” being set to “Any Device” in ABM.

I saw a similar error mentioned here, but that was regarding Account Driven Enrollment, which is a different scenario. Does anyone know why Managed/Federated IDs are failing on a Shared iPad?

Replies (1)

Marked SolutionPending Review
Participant
6 months ago Apr 10, 2026
Marked SolutionPending Review

Hello! I have seen this one before. Since personal Apple IDs work but your Managed/Federated IDs fail, the issue might be rooted in your Apple Business Manager (ABM) configurations.

When a user logs into a Shared iPad, the OS must create a secure, temporary user workspace. If basic services are restricted for that managed account in ABM, the iPad cannot build the workspace and throws that specific error. Here are a few pointers to check:

  1. Enable iCloud Services: In ABM, navigate to Access & Services and confirm that basic services—specifically iCloud—are enabled for these accounts. Disabled services prevent the Shared iPad from creating the user workspace.
  2. Verify Federation Status: Go to ABM > Settings > Accounts and ensure your Directory Sync/Federation shows an active green status, confirming that user accounts are properly syncing from your Identity Provider.
  3. Test Direct Authentication: Have the affected users try logging directly into business.apple.com with their federated credentials to verify the accounts are active and authenticating on Apple’s end.

Once you ensure iCloud and core services are enabled for your managed accounts in ABM, the Shared iPad sign-in should proceed without issue.

Save