Microsoft Intune – Enrollment – How to enroll an Apple iOS/iPadOS Device using an Apple Configurator enrollment profile (.mobileconfig)

Self-Help Article (External)

Purpose

This article outlines the process for enrolling an Apple iOS/iPadOS device into Microsoft Intune using an Intune enrollment profile (.mobileconfig). This method is intended for user-driven enrollment scenarios and allows devices to be enrolled directly on the device without requiring Apple Configurator app.

Requirements

Step-by-Step Procedures

1. Intune: Review or Create Apple Configurator Enrollment Profile
   1. In the Microsoft Intune admin center, go to Devices > Enrollment
   2. Select the Apple tab
   3. Under Bulk Enrollment Methods, select Apple Configurator
   4. Select Profiles
   5. Review profiles or create new profile
      1. If a profile already exists:
         1. Skip to Step 2.
      2. If a new profile is required:
         1. Select Create Profile
         2. Enter Name and Description (optional)
         3. Select Next 
         4. Go to Settings
         5. For User Affinity, choose whether devices with this profile must enroll with or without an assigned user.
            1. Enroll without User Affinity: Use for shared or task-based devices. Company Portal is not supported.
            2. Enroll with User Affinity: Use for user-assigned devices. Supports Company Portal and user access to company data.
         6. Select Create
2. Intune: Export Enrollment Profile
   1. In the Microsoft Intune admin center, go to Devices > Enrollment
   2. Select the Apple tab
   3. Under Bulk Enrollment Methods, select Apple Configurator
   4. Select Profiles
   5. Select an Enrollment profile
   6. Select Export Profile
   7. In downloads folder, locate the .mobileconfig file.
3. Device: Enroll the iOS/iPadOS device
   1. Transfer the .mobileconfig file to the iOS/iPad device.
   2. Tap the profile.mobileconfig file
   3. When prompted, select Allow (if prompted to download configuration)
   4. Open  Settings > General > VPN & Device Management
   5. Select Profile downloaded
   6. Tap Install
   7. Enter the device passcode when prompted
   8. Review the profile details and tap Install
   9. Accept the Remote Management prompt, then tap Trust
   10. When prompted, complete any required authentication (if applicable)
   11. Tap Done after the profile installation completes
4. Device: Verify Enrollment Status
   1. Open Settings > General > VPN & Device Management
   2. Confirm the Microsoft Intune management profile is listed
5. Intune: Verify Device Enrollment
   1. Return to the Microsoft Intune admin center
   2. Confirm the device appears under Devices > iOS/iPadOS
   3. Verify the device status shows as Managed and Compliant (if compliance policies are assigned)