Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.iru.com/llms.txt

Use this file to discover all available pages before exploring further.

Apple Business Manager is now Apple Business. Apple School Manager is unchanged. For more information, see Introducing Apple Business and Apple Business Manager is now Apple Business.

​
About Multiple ADE Token Configuration

Configuring multiple Automated Device Enrollment (ADE) tokens allows you to manage multiple Apple Business or Apple School Manager integrations simultaneously. This process uses the Iru Endpoint API to automate token creation and management, enabling bulk operations and improved token lifecycle management.

​
How It Works

Multiple ADE token configuration works by using the Iru Endpoint API to create, manage, and monitor multiple ADE integrations. The process involves downloading public keys, creating integrations through API calls, and verifying successful token creation. This approach enables automated management of multiple Apple Business or Apple School Manager connections.

​
Configuring an Iru Endpoint API token

If you do not feel confident in completing this process yourself, please reach out to Iru Endpoint Support for additional guidance.
It is highly recommended that you renew the current Automated Device Enrollment token in Iru Endpoint (Account Menu Button → Integrations → Apple integrations → Automated Device Enrollment > Renew) before starting this process. Only the latest Automated Device Enrollment token that you add will be displayed on your Apple integrations page; renewing your existing token first makes the process easier. Prepare an API token and store it in a secure location. You can read more about this in our Iru Endpoint API article.

​
Create or modify an API token

Create a new API token or modify an existing one with ADE permissions.
1

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
2

Open Access

Click Access in the menu.
Screenshot of the account menu with Access option highlighted
3

Open API tokens

Select the API tokens tab.
4

Configure ADE Permissions

Create or modify the existing API Token to include all ADE-related permissions.
Access page showing API token configuration with Automated Device Enrollment permissions

​
Preparing Postman

Most of the steps moving forward will be performed inside the Postman application on your device. You can skip this section if you already have Postman configured.
1

Check Collection for ADE Folder

Check your Collection for the Automated Device Enrollment integrations folder.
2

Define API URL

Define your API URL if undefined in the Iru Endpoint API folder at the top of the collection.
3

Configure API Token

Define the API Token in your Environment variables following our How to Set Up the Iru Endpoint API in Postman article.

​
Downloading Public Key

Now that Postman is configured with the API Key and Iru Endpoint Subdomain, you can download the public key.
1

Select Download ADE Public Key

Select the Iru Endpoint API > Automated Device Enrollment Integrations > GET Download ADE public key in the Collection.
2

Send API Request

Click the Send button.
3

Copy Output to Text Editor

Copy the output and paste it into a text editor.
4

Set File Format

Set the file format to plain text.
5

Save as PEM Certificate

Save the text file with the .pem certificate file extension.
6

Sign in to Apple Business or Apple School Manager

Sign in to Apple Business or Apple School Manager with a Managed Apple Account that can manage device management services.
7

Open the Devices tab

Click the Devices tab at the top of the page.
8

Open Management

In the left sidebar, click Management.
9

Add a device management service

Scroll to the bottom of the Management Services list and click Add next to Add device management service.
Apple Business or Apple School Manager Management Services list with Add device management service
10

Enter the service name

In the Service Name field, enter a name that identifies this MDM integration (for example, one that matches how you will label the token in Postman).
11

Optional: Allow this service to release devices

If your organization needs it, select Allow this service to release devices.
12

Upload the PEM file

Upload the .pem file you saved from the public key output.
13

Click Next

Click Next.
Add device management service form with Service Name, release devices option, and public key upload
14

Download the service token

Click Download Service Token.
Apple Business or Apple School Manager Download Service Token action
15

Click Done in Apple Business or Apple School Manager

Click Done.

​
Creating Integration

This section will cover using the API command that will complete the process of creating the new ADE connection. Use the .p7m file you downloaded from Apple Business or Apple School Manager.
1

Select Create ADE Integration

Select Iru Endpoint API > Automated Device Enrollment Integrations > POST Create ADE Integration in the Collection.
2

Configure Request Body

Click on the Body tab that has a green dot and enter blueprint_id, phone, and email.
3

Attach P7M File

Click Select Files and attach the .p7m file.
4

Send Request

Click the Send button.
You can repeat the Download public key and Create Integration processes for each additional integration you would like to add.

​
Checking Current Integrations

Iru Endpoint API > Automated Device Enrollment Integrations > GET List ADE Integrations command will give us all current ADE integrations so that we can verify that the integration was added successfully.
1

Select List ADE Integrations

Select Iru Endpoint API > Automated Device Enrollment Integrations > GET List ADE Integrations in the Collection.
2

Send Request

Click the Send button.
3

Verify Integration Count

If the count is equal to at least 2, the creation process is successful.

​
Considerations

  • API Token Security: Store your API token in a secure location and never share it publicly
  • Postman Configuration: Ensure Postman is properly configured with the latest API collection
  • Error Handling: Monitor API responses for errors and troubleshoot accordingly
  • Monitoring: Regularly check integration status and token validity
  • ADE Token Renewal: Renew existing ADE tokens before creating new ones to maintain continuity
  • Certificate Management: Keep track of .pem and .p7m files for each integration
  • Integration Limits: Be aware of any limits on the number of ADE integrations per tenant
  • Blueprint Configuration: Ensure blueprints are properly configured before creating integrations
  • Apple Business or Apple School Manager access: Verify you have administrative access to the portal for MDM server creation
  • Documentation: Keep records of all created integrations and their configurations
  • Testing: Test integrations in a controlled environment before production deployment
  • Backup Strategy: Have a plan for managing integrations if API access becomes unavailable
  • Support: Contact Iru Endpoint Support for assistance with complex integration scenarios
  • Compliance: Ensure ADE integrations meet your organization’s security and compliance requirements