> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure multiple ADE tokens using the Iru Endpoint API

> Configure multiple Automated Device Enrollment tokens with the Iru Endpoint API to link several Apple Business or School Manager accounts to MDM servers.

<Note title="Apple Business name change">
  **Apple Business Manager** is now **Apple Business**. **Apple School Manager** is unchanged. For more information, see [Introducing Apple Business](https://www.apple.com/newsroom/2026/03/introducing-apple-business-a-new-all-in-one-platform-for-businesses-of-all-sizes/) and [Apple Business Manager is now Apple Business](https://support.apple.com/guide/apple-business-manager/apple-business-manager-is-now-apple-business-axmd79d79dea/web).
</Note>

### About Multiple ADE Token Configuration

Configuring multiple Automated Device Enrollment (ADE) tokens allows you to manage multiple Apple Business or Apple School Manager integrations simultaneously. This process uses the Iru Endpoint API to automate token creation and management, enabling bulk operations and improved token lifecycle management.

### How It Works

Multiple ADE token configuration works by using the Iru Endpoint API to create, manage, and monitor multiple ADE integrations. The process involves downloading public keys, creating integrations through API calls, and verifying successful token creation. This approach enables automated management of multiple Apple Business or Apple School Manager connections.

### Configuring an Iru Endpoint API token

<Warning>
  If you do not feel confident in completing this process yourself, please reach out to [Iru Endpoint Support](/en/iru/iru-support/access-to-iru-support) for additional guidance.
</Warning>

It is highly recommended that you renew the current Automated Device Enrollment token in Iru Endpoint ([**Account Menu Button**](/en/iru/platform-overview/account-menu) → **Integrations** → Apple integrations → Automated Device Enrollment > Renew) before starting this process. Only the latest Automated Device Enrollment token that you add will be displayed on your Apple integrations page; renewing your existing token first makes the process easier.

Prepare an API token and store it in a secure location. You can read more about this in our [Iru Endpoint API](/en/endpoint/api/iru-api-overview) article.

#### Create or Modify an API Token

Create a new API token or modify an existing one with ADE permissions.

<Steps>
  <Step title="Navigate to the Account Menu Button">
    In Iru Endpoint, in the sidebar, click the [**Account Menu Button**](/en/iru/platform-overview/account-menu).
  </Step>

  <Step title="Open Access">
    Click **Access** in the menu.

    <Frame>
      <img src="https://mintcdn.com/iru/8BYPjuKZa-zyEEf_/assets/media/images/iru-nav-access.png?fit=max&auto=format&n=8BYPjuKZa-zyEEf_&q=85&s=466fdf5fb47efd6bab8b450a5a1e8302" alt="Screenshot of the account menu with Access option highlighted" width="562" height="1040" data-path="assets/media/images/iru-nav-access.png" />
    </Frame>
  </Step>

  <Step title="Open API tokens">
    Select the **API tokens** tab.
  </Step>

  <Step title="Configure ADE Permissions">
    Create or modify the existing API Token to include all ADE-related permissions.

    <Frame>
      <img src="https://mintcdn.com/iru/TjTgZOrl7Pjp2y4D/assets/media/images/z_Z8Y0jzOI_eGl4GRPgnhJyDOm0_JvrpCA(1).png?fit=max&auto=format&n=TjTgZOrl7Pjp2y4D&q=85&s=d70e2b55f09773a5a0eee1533513e486" alt="Access page showing API token configuration with Automated Device Enrollment permissions" width="2968" height="2398" data-path="assets/media/images/z_Z8Y0jzOI_eGl4GRPgnhJyDOm0_JvrpCA(1).png" />
    </Frame>
  </Step>
</Steps>

### Preparing Postman

Most of the steps moving forward will be performed inside the Postman application on your device. You can skip this section if you already have Postman configured.

<Steps>
  <Step title="Check Collection for ADE Folder">
    Check your Collection for the Automated Device Enrollment integrations folder.
  </Step>

  <Step title="Define API URL">
    Define your API URL if undefined in the Iru Endpoint API folder at the top of the collection.
  </Step>

  <Step title="Configure API Token">
    Define the API Token in your Environment variables following our How to Set Up the Iru Endpoint API in Postman article.
  </Step>
</Steps>

### Downloading Public Key

Now that Postman is configured with the API Key and Iru Endpoint Subdomain, you can download the public key.

<Steps>
  <Step title="Select Download ADE Public Key">
    Select the Iru Endpoint API > Automated Device Enrollment Integrations > GET Download ADE public key in the Collection.
  </Step>

  <Step title="Send API Request">
    Click the Send button.
  </Step>

  <Step title="Copy Output to Text Editor">
    Copy the output and paste it into a text editor.
  </Step>

  <Step title="Set File Format">
    Set the file format to plain text.
  </Step>

  <Step title="Save as PEM Certificate">
    Save the text file with the .pem certificate file extension.
  </Step>

  <Step title="Sign in to Apple Business or Apple School Manager">
    Sign in to [Apple Business](https://business.apple.com) or [Apple School Manager](https://school.apple.com) with a Managed Apple Account that can manage device management services.
  </Step>

  <Step title="Open the Devices tab">
    Click the **Devices** tab at the top of the page.
  </Step>

  <Step title="Open Management">
    In the left sidebar, click **Management**.
  </Step>

  <Step title="Add a device management service">
    Scroll to the bottom of the **Management Services** list and click **Add** next to **Add device management service**.

    <Frame>
      <img src="https://mintcdn.com/iru/QlM0bw2VPN4WhxbZ/assets/media/images/iru-apple-business-add-management-service.png?fit=max&auto=format&n=QlM0bw2VPN4WhxbZ&q=85&s=b260dcfc77fcbcc20166a0f952a20dc0" alt="Apple Business or Apple School Manager Management Services list with Add device management service" width="2722" height="1496" data-path="assets/media/images/iru-apple-business-add-management-service.png" />
    </Frame>
  </Step>

  <Step title="Enter the service name">
    In the **Service Name** field, enter a name that identifies this MDM integration (for example, one that matches how you will label the token in Postman).
  </Step>

  <Step title="Optional: Allow this service to release devices">
    If your organization needs it, select **Allow this service to release devices**.
  </Step>

  <Step title="Upload the PEM file">
    Upload the **.pem** file you saved from the public key output.
  </Step>

  <Step title="Click Next">
    Click **Next**.

    <Frame>
      <img src="https://mintcdn.com/iru/QlM0bw2VPN4WhxbZ/assets/media/images/iru-apple-business-add-management-service-details.png?fit=max&auto=format&n=QlM0bw2VPN4WhxbZ&q=85&s=e8a7792645e4029745e87a3746141bc8" alt="Add device management service form with Service Name, release devices option, and public key upload" width="1020" height="1268" data-path="assets/media/images/iru-apple-business-add-management-service-details.png" />
    </Frame>
  </Step>

  <Step title="Download the service token">
    Click **Download Service Token**.

    <Frame>
      <img src="https://mintcdn.com/iru/QlM0bw2VPN4WhxbZ/assets/media/images/iru-apple-business-download-management-service-token.png?fit=max&auto=format&n=QlM0bw2VPN4WhxbZ&q=85&s=2e0c00b13080be10f6890fd4179aaa09" alt="Apple Business or Apple School Manager Download Service Token action" width="1012" height="1264" data-path="assets/media/images/iru-apple-business-download-management-service-token.png" />
    </Frame>
  </Step>

  <Step title="Click Done in Apple Business or Apple School Manager">
    Click **Done**.
  </Step>
</Steps>

### Creating Integration

This section will cover using the API command that will complete the process of creating the new ADE connection. Use the **.p7m** file you downloaded from Apple Business or Apple School Manager.

<Steps>
  <Step title="Select Create ADE Integration">
    Select Iru Endpoint API > Automated Device Enrollment Integrations > POST Create ADE Integration in the Collection.
  </Step>

  <Step title="Configure Request Body">
    Click on the Body tab that has a green dot and enter blueprint\_id, phone, and email.
  </Step>

  <Step title="Attach P7M File">
    Click Select Files and attach the .p7m file.
  </Step>

  <Step title="Send Request">
    Click the Send button.
  </Step>
</Steps>

You can repeat the Download public key and Create Integration processes for each additional integration you would like to add.

### Checking Current Integrations

Iru Endpoint API > Automated Device Enrollment Integrations > GET List ADE Integrations command will give us all current ADE integrations so that we can verify that the integration was added successfully.

<Steps>
  <Step title="Select List ADE Integrations">
    Select Iru Endpoint API > Automated Device Enrollment Integrations > GET List ADE Integrations in the Collection.
  </Step>

  <Step title="Send Request">
    Click the Send button.
  </Step>

  <Step title="Verify Integration Count">
    If the count is equal to at least 2, the creation process is successful.
  </Step>
</Steps>

### Considerations

<AccordionGroup>
  <Accordion title="API, Postman, and error handling">
    * **API Token Security**: Store your API token in a secure location and never share it publicly
    * **Postman Configuration**: Ensure Postman is properly configured with the latest API collection
    * **Error Handling**: Monitor API responses for errors and troubleshoot accordingly
    * **Monitoring**: Regularly check integration status and token validity
  </Accordion>

  <Accordion title="Tokens, certificates, and limits">
    * **ADE Token Renewal**: Renew existing ADE tokens before creating new ones to maintain continuity
    * **Certificate Management**: Keep track of .pem and .p7m files for each integration
    * **Integration Limits**: Be aware of any limits on the number of ADE integrations per tenant
  </Accordion>

  <Accordion title="Blueprints and Apple portal access">
    * **Blueprint Configuration**: Ensure blueprints are properly configured before creating integrations
    * **Apple Business or Apple School Manager access**: Verify you have administrative access to the portal for MDM server creation
  </Accordion>

  <Accordion title="Documentation, testing, and support">
    * **Documentation**: Keep records of all created integrations and their configurations
    * **Testing**: Test integrations in a controlled environment before production deployment
    * **Backup Strategy**: Have a plan for managing integrations if API access becomes unavailable
    * **Support**: Contact Iru Endpoint Support for assistance with complex integration scenarios
    * **Compliance**: Ensure ADE integrations meet your organization's security and compliance requirements
  </Accordion>
</AccordionGroup>
