Relution Signet Customer Hub

Overview of enrollments

Vision Pro is becoming a central component of modern organizations, opening up entirely new possibilities. Relution supports multiple enrollment methods to ensure Vision Pro can be integrated seamlessly and used to its full potential. Besides enrollment via DEP, Apple User Enrollment is also available.

Auto-enrollment using DEP profile

Apple School or Business Manager was introduced by Apple to help organizations and educational institutions deploy Apple devices remotely. With the aid of ASM/ABM, brand-new Apple devices can be enrolled in Relution without a technician ever having to get hold of them.

DEP Profile →
DEP General →

Requirements

  • visionOS 1.1 or later.
  • Organization should be enrolled in Apple School / Apple Business Manager.
  • If devices were purchased directly from Apple, the Apple customer number assigned to the organization is required to link eligible orders and devices to Apple School / Business Manager.
  • If devices were purchased directly from an authorized reseller or carrier, the devices must be linked to that reseller’s DEP Reseller ID. The actual date of eligibility is determined by the sales history of the authorized reseller or network operator.

Account-driven user enrollment

This is the typical enrollment method for Bring Your Own Device (BYOD) scenarios. Users can carry out the enrollment themselves, and the devices do not need to be reset to factory settings.

Relution supports account-driven user enrollment for visionOS devices that are not in Supervised Mode.

Account-driven user enrollment requires the following:

  • Service Discovery well-known hosts

Service Discovery must be configured so that Apple can direct devices to the correct MDM server. To do this, publish an HTTP well-known resource file on the domain users sign in with. Apple must be able to retrieve this file via an HTTP GET request at the following URL:

https://yourdomain.com/.well-known/com.apple.remotemanagement

Under yourdomain.com, use the domain also used for Apple IDs. The file must be hosted on a domain that can handle HTTP GET requests.

Create the file in JSON format with the content type application/json. To enter the correct information in the file, copy the required information directly from the Relution portal. To do this, open:

  1. Settings
  2. Device management
  3. Account-driven Apple user enrollment
  4. Turn the toggle on
  5. Copy the text inside the curly braces and paste it into the file

Example: maxmustermann@musterhausen.de

In this example, the domain would be musterhausen.de. The Service Discovery file would need to be published there.

Subsequent enrollment via Apple Configurator 2

Apple Configurator 2 is a free app available from the Mac App Store. The application can be used to manually configure Apple devices connected via USB to a macOS device before the devices are handed out to users. For this purpose, so-called profiles can be created and applied to the devices. In addition, Apple Configurator 2 allows Apple devices that have not already been added to DEP by an authorized reseller to be subsequently added to DEP. Overall, it is recommended to purchase DEP devices directly, as adding them later involves manual effort.

Requirements

  • visionOS 1.1 or later.
  • macOS device with Apple Configurator 2.5 or higher.
  • Make sure the macOS device and Vision Pro are connected to the same Wi-Fi or Ethernet connection.

For visionOS devices, the following path must be specified as the MDM server URL if the devices are to be managed on the Relution live system. For a self-hosted Relution instance, replace live.relution.io with the server’s hostname.

https://live.relution.io/api/enrollment/v1/appleMdm/depenroll

Apple devices that are subsequently registered in Apple School / Business Manager via Apple Configurator 2 will not function like devices registered directly in DEP when purchased through an authorized reseller for the first 30 days after deployment. Even if manual removal of MDM management on devices has been blocked via the associated DEP profile in the MDM system, users can remove the MDM management under Settings → General → Profiles.

Detailed guide on adding Apple devices to DEP after the fact →