Exploring the latest updates from Apple’s WWDC25. Apple continues to evolve its ecosystem. Specifically, it simplifies Device deployment, App management, Identity integration, and Enterprise Security. Here’s a simplified walkthrough of the most impactful updates from Apple.
🔐 Managed Apple Accounts & Identity
Last Year’s Updates (2024)
- Apple introduced the ability for IT teams to lock their domain and take ownership of Apple accounts created using that domain.
- Once domain locking is initiated, users are guided through a process to update their Apple accounts.
- This process helps organizations transition personal Apple IDs into Managed Apple IDs for improved oversight and access control.
Apple has enhanced Managed Apple IDs to help IT teams take ownership of user accounts and data. Organizations can now:
What’s New This Year (2025)
Admins can now download a list of personal Apple accounts associated with their domain. This enables direct communication with users to help them update their accounts. As a result, Users gain access to all services provisioned by the organization, this includes a new service: App Notarization, enhancing security and compliance.
Expanded Access Management:
- IT can now prevent personal Apple IDs from being signed into organizationally owned devices.
- Only Managed Apple IDs work on company devices.
This restriction applies universally:
- Including Setup Assistant and System Settings.
- There are no MDM requirements or dependencies for this enforcement.
Goal of These Changes:
To help organizations seamlessly adopt Managed Apple IDs and strengthen security by clearly separating personal and work accounts across all devices.
📲 Device Inventory Enhancements in Apple Device Management
Expanded Device Information:
Apple has been adding more details to devices in your organization, such as:
- Activation Lock status
- Device storage
- Cellular Information Added
Earlier this year, they added:
- IMEI
- EID
(Useful for identifying and managing cellular-connected devices.)
Release Device Details
Apple has expanded information for released devices, including:
- Who released the device?
- When was it released?
Upcoming: MAC Addresses on iPhone & iPad
Later this year, they’re adding:
- Bluetooth and Wi-Fi MAC addresses for iPhone and iPad
(This is helpful for organizations managing network access based on MAC addresses.)
AppleCare Coverage Visibility
➤ AppleCare coverage information will now be available:
- Helps IT teams track coverage
- Aids in repair and replacement decisions
API Access to Inventory Data
➤ With the initial API set, you can:
- Access device inventory data
- Manage MDM server assignments
List of Supported API Endpoints
- Query information about a list of devices
- Assign devices to a device management service
- Get batch activity status, and more
Getting Started with the API
- Begin by creating an API account
- API accounts can only be created by Administrators and Site Managers
Private API Key Generation
- Apple will generate and allow you to download a private API key
- This key is to be used with your app or service
📌Automated Device Enrollment in Apple Device Management
- Automated Device Enrollment is Apple’s core approach to simple device management.
- It allows for just-in-time delivery of hardware without IT physically handling each machine.
- Not all organizational devices are purchased through regular channels.
- Now, all MDM-capable devices can be added to organizations with Apple Configurator.
(Note: visionOS now supports skipping panes in Setup Assistant.)
📌Account-Driven Enrollment: A Privacy-Focused Alternative
When Automated Enrollment isn’t available, Apple provides Account-Driven Enrollment as a simple, privacy-focused method. Users enroll using their Managed Apple ID.
Service Discovery via MDM Server:
- You can now use the MDM server to configure the Service Discovery URL.
- If the device can’t find the endpoint, it will check with Apple Business Manager (ABM) or Apple School Manager (ASM).
Configuration Steps:
Once the MDM server sets the redirect URL:
- Log in to ABM or ASM to specify the default device management service assignment.
- This applies to each device supporting Account-Driven Enrollment.
Easier for COPE and BYOD Environments
- Corporate-Owned Personally Enabled (COPE) devices
- Personally Owned Devices (BYOD)
Moving Devices Between MDM Servers
Organizations often move devices between MDM servers due to:
- Acquisitions
- Shifting from on-prem to cloud-based MDM
- Switching MDM solutions
🔄 Device Management Migration
Organizations can now migrate devices between MDM servers—without wiping or manual re-enrollment. Admins can set a deadline and guide users through the process. Once migrated, the new MDM takes control and rotates critical security keys like FileVault.
🆕 Device Management Enhancements:
- Software updates via Declarative Device Management (DDM) are now available on all platforms, including Apple TV and Vision Pro.
- DDM replaces traditional update methods with better control over deferrals, scheduling, and deadlines.
- Safari management allows IT to configure bookmarks and default homepages using declarative settings.
⚙️ Apple Intelligence Controls
Apple Intelligence features like writing tools and notification summaries now extend to Vision Pro. This can be managed how these tools are deployed to comply with privacy and policy requirements.
🔄 Return to Service
Apple now allows apps to persist after a device reset—user data is wiped, but managed apps remain. This reduces setup time and helps in bandwidth-constrained environments.
🧩 App Management Improvements
Apple has significantly improved app management in this year’s update. IT admins can now manage update behavior on a per-app basis, giving teams greater control over what gets updated and when. Additionally, admins can pin specific app versions or disable auto-updates entirely to prevent unwanted changes in production environments. Furthermore, teams can monitor update progress through a dedicated status channel, making it easier to track deployments across large device fleets. Finally, for macOS specifically, declarative app management now supports both App Store apps and custom package apps — giving IT teams a unified approach to managing all software on company devices.
🧑💻 Identity Integration & Platform SSO
Platform SSO now starts directly in Setup Assistant, improving Mac enrollment with:
- Federated sign-in using work credentials.
- Synchronized local account creation.
- Secure Enclave-backed key authentication.
***Apple’s focus on security, automation, and declarative management is both inspiring and practical. These tools are empowering IT teams—large or small—to streamline workflows, improve security posture, and elevate the end-user experience.***
👉Follow TexArxs for more updates!