Skip to main content
This guide applies to Apple devices
This guide walks you through enrolling your Apple device with your organization’s device management system. Apple management uses Apple’s MDM framework combined with Iru Endpoint’s proprietary agent for advanced management capabilities. You’ll need the Enrollment Portal link and Enrollment code provided by your IT team.

​
What to Expect

When you enroll your Apple device, it will be connected to your organization’s management system through Apple’s MDM framework. Iru Endpoint’s macOS agent will be installed to handle advanced management tasks. This allows your IT team to:
  • Deploy, upgrade, and uninstall company applications and software
  • Apply security policies and settings
  • Configure network access (Wi-Fi, VPN)
  • Monitor device compliance and gather system information
Your personal data and applications remain private and won’t be affected by the enrollment process.

​
Prerequisites

Before starting, make sure you have:
  • Enrollment Portal link - provided by your IT team
  • Enrollment code - provided by your IT team
  • Work or school account - your organization email and password
  • Apple device - iPhone, iPad, Mac, or Apple TV
Make sure your Apple device is running a supported version of iOS, iPadOS, macOS, or tvOS. Contact your IT team if you’re unsure about compatibility.

​
Apple Enrollment Process

1

Access enrollment portal

On your Apple device, open Safari and go to the Enrollment Portal link provided by your IT team.
2

Enter Enrollment code

Enter the Enrollment code provided by your IT team. If you have issues with your code, see Troubleshooting.
3

Continue

Tap or click Continue.
4

Sign in with work or school account

If prompted, sign in with your work or school account. You may be redirected to your company’s sign-in page. Use the same email and password you use for work.
5

Start enrollment

Tap or click Enroll.
6

Install management profile

When prompted, tap or click Install to install the management profile.
7

Install the profile

Open your device settings and install the management profile so it can take effect. Follow the steps for your device:
a. Open Settingsb. Tap General, then VPN & Device Managementc. Install the management profile and enter the device Passcode if requested.
8

Enrollment complete

Once the profile is installed and trusted, enrollment is complete. Your device is now managed by your organization.

​
After Enrollment

Once enrollment is complete:
  • Company applications will begin installing automatically via the Iru Endpoint macOS agent
  • Security policies will be applied to your device through Apple’s MDM framework
  • Network settings (Wi-Fi, VPN) will be configured
  • Device sync happens every 24 hours to keep settings current, with agent check-ins for advanced management tasks
It may take several minutes for all company applications and settings to appear on your device. If something doesn’t appear immediately, wait a few more minutes and check again.

​
Automated Device Enrollment (ADE) After Setup

If a Mac has already passed through Setup Assistant without enrolling, it is still possible to enroll it into Iru Endpoint. Please follow the steps below to enroll your device.

​
Open Terminal

1

Open Spotlight

Open Spotlight by pressing Command-Space bar.
2

Type Terminal

Type Terminal.
Spotlight search with Terminal for enrollment command
3

Launch Terminal

Press Enter on your keyboard.

​
Run Command in Terminal

1

Run enrollment command

Run the following command in Terminal by copying and pasting it into Terminal and pressing Enter on your keyboard:
sudo profiles renew -type enrollment
Terminal with profiles renew enrollment command
2

Enter password

Enter your password when prompted and press Enter on your keyboard.
3

Click banner notification

The Mac will display a banner notification in the top-right corner prompting you to enroll the device into Iru Endpoint. Click on the banner notification.
Mac banner notification prompting enroll device into Iru Endpoint
4

Allow enrollment

System Settings will open to confirm the enrollment; click Allow.
System Settings enrollment confirmation with Allow
5

Enter credentials

Enter your username and password in the prompt.
6

Complete enrollment

Click Enroll. The Mac is now enrolled in Iru Endpoint.
Enroll button to complete Mac enrollment in Iru Endpoint

​
Troubleshooting

Possible causes:
  • Incorrect email or password
  • Account not set up for enrollment
  • Issues with your company’s sign-in page
Solutions:
  • Make sure you’re using your work or school email and password
  • Try signing out and signing back in
  • Contact your IT team if you still can’t sign in
Possible causes:
  • Incorrect Enrollment code entered
  • Enrollment code expired or changed
Solutions:
  • Double-check the Enrollment code provided by your IT team
  • Contact your IT team for a new Enrollment code if needed
Possible causes:
  • Device restrictions preventing profile installation
  • Insufficient storage space
  • Network connectivity issues
Solutions:
  • Check that you have enough storage space on your device
  • Ensure you have a stable internet connection
  • Try restarting your device and attempting enrollment again
  • Contact your IT team if the problem persists
Possible causes:
  • Enrollment still in progress
  • Network connectivity issues
  • Device sync hasn’t completed
Solutions:
  • Wait 5–10 minutes for your device to finish setting up
  • Check your internet connection
  • Restart your device and wait a few more minutes
  • Contact your IT team if apps still don’t appear after 30 minutes

​
Additional Considerations

​
Automated Device Enrollment (ADE)

If your organization uses Automated Device Enrollment, your device may be automatically enrolled during the initial setup process. In this case, you won’t need to manually enroll through the portal - the enrollment will happen automatically when you first set up your device.

​
Bring Your Own Device (BYOD) Considerations

If you’re enrolling a personal device (BYOD), be aware that:
  • Your personal data and applications remain private
  • Only work-related configurations and applications will be managed
  • You can remove the management profile if you leave the organization