What's new 
We’re setting up supervised iPhones through Apple Business Manager / Automated Device Enrollment and testing a lockdown policy in Hexnode. The devices enroll successfully, but when apps are pushed, the phone keeps asking for an iTunes or Apple ID login. We do not want users signing in with personal Apple IDs, and the policy already blocks the App Store and iTunes. Some required apps are already on the device, so I’m not sure why it is still asking for a login. We’re also seeing compliance issues for an app that has not installed properly. What is the correct way to install apps silently on these iOS devices and keep Apple ID sign-in blocked?
7 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
1 minute ago
Sep 22, 2026
Marked SolutionPending Review
For supervised iOS devices, Apple ID prompts during app installation usually mean the app is being installed without a device-based app license.
If a public App Store app is pushed to an iPhone without Apple Volume Purchase Program (VPP) licensing configured, iOS may prompt for an Apple ID because it treats the install like a user-owned App Store install.
To install apps silently through Hexnode:
1. In Apple Business, go to Apps and Books and acquire licenses for the required apps. This includes the Hexnode UEM app if you are deploying it to managed iOS devices.
2. Download or generate the VPP token from Apple Business.
3. In Hexnode, upload the token under Admin > Apple VPP.
4. Sync the VPP account so the purchased app licenses appear in Hexnode.
5. Add the VPP version of the app to the policy instead of deploying it as a regular public app without a VPP license.
6. Assign the policy to the device or device group and run a device scan.
Once the VPP token and app licenses are configured, app installation can be performed silently without requiring end users to sign in with personal Apple IDs.
Blocking the App Store or iTunes is fine for lockdown, but it does not replace VPP licensing. If the required app has no VPP license, the install can still fail or trigger an Apple ID prompt.
Regards,
Mary Romero
Save