Learn to implement Apple's latest enterprise management features from WWDC 2025 through this comprehensive conference talk delivered by Apple consulting engineers at JNUC 2025. Master the Apple Business Manager/School Manager API for automated device tracking using OAuth 2.0 authentication with Python and Swift, execute seamless MDM migrations without wiping devices across macOS 26, iOS 26, iPadOS 26, and visionOS 26, and implement return-to-service workflows that preserve managed app binaries while erasing user data for rapid 5-minute device resets. Discover how to deploy Platform Single Sign-On with Setup Assistant enforcement and authenticated guest mode for shared device environments in healthcare, education, and enterprise settings. Explore tap-to-login functionality using NFC-enabled iPhone or Apple Watch for express authentication in shift worker scenarios, navigate the new 30-day domain capture transition window with executive communication strategies, and implement device account restrictions limiting sign-ins to managed accounts only. Gain practical insights into Vision Pro return-to-service workflows with on-device initiation, Wi-Fi profile requirements, and Eyesight animation during enrollment data transfer. Access detailed API implementation guidance including OpenAPI specifications, rate limiting considerations, and open-source tools like ASM-BBUtil for testing, while understanding migration prerequisites such as enrollment networks and configuration matching for elegant MDM transitions that maintain user data integrity across all Apple platforms.

Syllabus

0:00 Introduction: Apple Enterprise Growth and WWDC 2025 Announcements
2:56 Apple Business Manager/School Manager AXM Overview and New Features
4:08 Domain Capture Changes: 30-Day Window and Executive Transition Strategies
6:22 Device Account Restrictions: Limiting Sign-Ins to Managed Accounts
7:13 Apple Business Manager API: Automating Device Inventory and MDM Assignment
9:37 API Implementation: OAuth Authentication with Python and PEM Certificates
13:16 Open-Source Tools: ASM-BBUtil and API Client for Testing
15:11 Device Migration: Elegant MDM Transitions Without Wiping Devices
17:28 Migration Prerequisites: Enrollment Networks and Configuration Matching
21:24 Return-to-Service: Preserving Managed Apps on iOS/iPadOS/visionOS 26
23:01 Vision Pro Return-to-Service: On-Device Initiation and Wi-Fi Profile Requirements
26:06 Vision Pro User Experience: Eyesight Animation and Enrollment Data Transfer
27:40 Platform SSO Overview: Evolution from SSO Extensions to Setup Assistant Integration
29:38 Authenticated Guest Mode: Shift Worker Workflows with Session Cleanup
32:13 Authenticated Guest Mode Demo: Microsoft Entra ID Integration and Desktop Cleanup
36:30 Tap-to-Login: NFC-Based Authentication with iPhone/Apple Watch Express Mode