MacOS/iOS device enrollment on Deel IT

Enrolling your Apple devices correctly ensures they are secure, compliant, and ready to use from the moment your team powers them on. Deel IT supports three enrollment methods to suit different setups and locations:

• Apple Business Manager (Organization ID + Reseller Number)
• Apple Business Manager (Apple Configurator)
• Remote Post-Delivery enrollment

We recommend using Apple Business Manager (ABM) whenever available, as it provides the most secure and automated experience.

This article explains why Apple Business Manager is preferred and provides step-by-step instructions for each enrollment method.

In this article

• Why use Apple Business Manager?
• Enrolment Method 1: ABM (Organization ID + Reseller Number)
• Enrolment Method 2: ABM (Apple Configurator)
• Enrolment Method 3: Remote Post-Delivery enrollment
• Security and compliance considerations

If you prefer a Manual Device Pre-Configuration, check out our article on Device pre-configuration. 

Why use Apple Business Manager?

Apple Business Manager (ABM) is the best practice for modern device enrollment. It offers a secure, scalable, and automated method for preparing devices.

Benefits of ABM:

• Zero-Touch Deployment: Devices automatically join your MDM solution on first startup.

• Enhanced Security: Devices are locked to your ABM account, preventing unauthorized use.

• Scalability: Ideal for managing devices across multiple countries and users without manual IT work.

Learn more on the Apple Business Manager portal.

Enrolment Method 1: ABM (Organization ID + Reseller Number)

This is the standard and most common method. It requires adding Deel’s local supplier reseller number to your ABM account. Devices purchased through an authorized Apple reseller are automatically enrolled in MDM.

Steps:

1. Retrieve Your ABM Organization ID:

   a. Log in to Apple Business Manager.

   b. Click your name in the bottom left corner, then select Preferences.

   c. Navigate to Organization Information and copy your Organization ID.

   d. Send this ID to Deel.

2. Add the Reseller Partner Number:

   a. Log in to Apple Business Manager.

   b. Select your name in the bottom-left sidebar.

   c. Choose Preferences, then select Management Assignment.

   d. Select Edit next to Customer Numbers.

ABM with Apple Organization ID and Reseller Number Supported Countries

Enrolment Method 2: ABM (Apple Configurator)

This method is used when devices are not purchased through authorized Apple resellers. It requires creating a user in ABM with the Device Enrollment Manager role and securely sharing it with Deel IT.

Steps:

1. In ABM, create a new account for Deel IT with the Device Enrollment Manager role.

   • Email: techsupport@deel.com

   • Suggested formats: deel@yourdomain.appleid.com or deel@yourdomain.appleaccount.com

2. Assign the Device Enrollment Manager role.

3. Securely share the login details with Deel IT using one of the following:

   • A password manager’s sharing feature

   • A one-time secure link tool (e.g., 1ty.me)

   • Apple’s built-in “Send via email” feature

4. Deel IT will use this role only to add and remove devices in ABM.

Security note

The permissions of the Device Enrolment Manager role are limited to adding/removing devices from your ABM (the same as what a reseller can do). Our team will use the account when adding new devices & removing returned devices. You can read further information on the limited permissions here.  
Deel IT is SOC2 and ISO27001 certified, and we follow strict security practices. See our Trust Center for more details.

ABM with Apple Configurator Supported Countries

Enrolment Method 3: Manual MDM Enrollment (Remote Post-Delivery)

If Apple Business Manager enrollment is not supported in your region, Deel IT can assist with manual MDM enrollment through a remote setup call.

This method does not use Apple Business Manager (ABM). The device is enrolled directly into your organization’s Mobile Device Management (MDM) system during a remote setup call.

Steps:

1. After the device ships, the employee receives an email with a calendar link to schedule a configuration call.

2. During the call, Deel IT will:

   • Collect required identifiers (e.g., device hash)

   • Assist with account creation

   • Run configuration or setup scripts

   • Support app installation and OS updates

Deel IT does not provide custom imaging for device deployment.

Remote Post-Delivery enrollment Supported Countries

Security and compliance considerations

Deel IT ensures that all enrollment methods keep devices secure and compliant:

• Devices are tied to your organization and cannot be used outside your policies.

• Sensitive account access is handled only through approved secure-sharing methods.

• Deel IT’s processes are SOC2 and ISO27001 certified.

If you or your IT team have additional questions, please contact Deel IT Support. We can arrange a consultation call to review the best enrollment option for your organization.