Skip to main content
This guide applies to iOS and iPadOS devices

About Device Management Migration

Iru Endpoint supports Apple’s device management migration feature introduced with iOS 26 and iPadOS 26. This feature lets you migrate devices enrolled via Automated Device Enrollment (ADE) from one device management service to another without requiring a factory restore. Instead of a factory restore, the end-user performs a device restart to complete the migration. Activation Lock can also be transferred during the migration, ensuring new bypass codes are stored in Iru Endpoint.

How It Works

The migration process starts in Apple School Manager or Apple Business Manager, where you assign a device to a different device management server and set a migration deadline. This deadline determines when the device must complete migration to the new device management service. You can identify migrating devices in Iru Endpoint via the Automated Device Enrollment settings page. There’s a new optional column for Migration Deadline that can be added to the table. If a device has a migration deadline, it’s migrating from another device management service.

Activation Lock Preservation

If you want to preserve Activation Lock post-migration, ensure your device has an Automated Device Enrollment Library Item in its Blueprint with Activation Lock enabled. We recommend matching the Activation Lock type (user-based vs. device-based) with your original device management service. This ensures your security measures transfer seamlessly. For more information, see Configuring Apple Enrollment.

App Preservation

Iru Endpoint supports app preservation with device management migration for iPhone and iPad running iOS 26+ and iPadOS 26+. This feature allows specified managed apps to remain installed and configured on the device after migration completes. Business-critical managed apps no longer need to be re-downloaded post-migration, saving users time and preventing configuration issues.

Setting Up Device Management Migration

1

Assign Device in Apple Business Manager or Apple School Manager

Log in to Apple Business Manager or Apple School Manager and select the Assign Device Management option from the device information page.
2

Set Migration Deadline

Select Add Deadline to configure the date and time the device will be forced to migrate.
3

View Migration Deadline in Iru Endpoint

Once a deadline has been added, this date and time displays in Iru Endpoint under a new optional Migration deadline column on the Enrollment > Automated Device Enrollment page.
4

Configure Automated Device Enrollment Library Item

An Automated Device Enrollment Library Item is optional. It’s only needed if you want to preserve Activation Lock or managed apps post-migration.
If you want to preserve Activation Lock, ensure devices migrating into Iru Endpoint have an Automated Device Enrollment Library Item included in their Blueprint. Enable Activation Lock in the Automated Device Enrollment Library Item to ensure Activation Lock is maintained post-migration. We recommend matching the Activation Lock type (user-based vs. device-based) with your original device management service to ensure your security measures transfer seamlessly.
5

Enable App Preservation (Optional)

If you want to preserve managed apps during migration, enable Preserve managed apps during migration in the Automated Device Enrollment Library Item. This ensures any App Store app or in-house app Library Items that are set to install and continuously enforce will be preserved post-migration.
6

Add Apps to Enrollment Blueprint

Add any App Store apps and in-house apps you want to preserve to the enrollment Blueprint. Ensure that these apps are set to install and continuously enforce, as this is required for preservation. If these apps use managed app configuration, apply the proper configuration. While preserved apps remain configured post-migration, applying consistent configuration prevents improper overwrites during future device syncs.

User Experience

Shortly after the deadline is set, the device receives a push notification alerting the user to the upcoming migration deadline with a prompt to complete the migration early. The notification appears on the lock screen, home screen, and in Settings. Users can start the migration immediately or defer it until the deadline.
1

Receive Migration Notification

The device receives a push notification alerting the user to the upcoming migration deadline. The notification appears on the lock screen, home screen, and in Settings.
2

Start Migration

Users can start the migration immediately or defer it until the deadline. If deferred, the notification persists in the Settings app. Once the migration deadline has been reached, the end user can’t defer this notification and the device will force migration.
3

Restart Device

After starting the migration, the user is prompted to restart the device to complete the migration process.
4

Complete Migration

After the user performs the restart, they’re guided through a setup assistant to complete the device management migration.

Considerations

Activation Lock Transfer

While Activation Lock will be transferred to Iru Endpoint, all configured apps, profiles, and declarations installed from the original device management service will be removed post-migration unless app preservation is enabled. It’s recommended that admins recreate these resources in Iru Endpoint and assign them to the migrating device’s Blueprint.

App Preservation

When app preservation is enabled, specified managed apps remain installed and configured on the device after migration completes. This prevents business-critical managed apps from needing to be re-downloaded post-migration, saving users time and preventing configuration issues.
App Store app and in-house app Library Items need to be set to install and continuously enforce in order to be preserved during migration.

References

For more information about Apple’s device management migration feature, see Apple’s documentation.