Apple Business Essentials User Guide
- Intro to federated authentication
- Use federated authentication with Google Workspace
- Use federated authentication with Microsoft Azure AD
- Use federated authentication with your identity provider
- Resolve Apple ID conflicts
- Get notified about user name conflicts
- Change a user’s domain information
- Transfer Apple services when federating
- Add or reset verification phone numbers
- Intro to purchasing content
- Review content payment and billing information
- Select and purchase content
- Configure app installation and removal
- Monitor app installation status and license tracking
- Learn about Custom Apps
- Manage content tokens
- Transfer licenses
- Migrate content tokens
- Invite VPP purchasers
- Plan for migration to Apps
- Device workflow
- Enrollment methods
- Manage device suppliers
- View device information
- Get device order progress reports
- Add devices from Apple Configurator
- Release devices
- Intro to configuring settings
- AirDrop settings
- AirPlay settings
- AirPrint settings
- App Access settings
- Application Layer Firewall settings
- Certificate settings
- Content Caching settings
- Configure a Custom setting
- Data Management settings
- Energy Saver settings
- FileVault settings
- Gatekeeper settings
- iCloud settings
- Lock Screen settings
- Password and Screen Lock settings
- Software Update settings
- VPN settings
- Web Clip settings
- Web Filter settings
- Wi-Fi settings
- Edit a setting
- Apply Collections
- Document revision history
Sign users out of devices with Apple Business Essentials
When a user’s device should no longer be managed by Apple Business Essentials but you don’t want to erase it, you can sign a user out of the device.
When you sign out a user:
The device is unenrolled from the assigned MDM server
The Managed Apple ID is removed from the device
All settings are removed from the device
Any Managed Apps may be removed from the device
Any files created with a Managed App may be removed from the device
For User Enrolled devices, all personal apps and settings remain.
Remotely sign a user out of an organization-owned device
Administrators can remotely sign a user out of any device that they would like removed from device management.
In Apple Business Essentials, sign in with a user that has the role of Administrator.
Select Devices in the sidebar, search for a device in the search field, then select the device from the list. See How to search.
After you’ve searched for the device, select it from the list, then select the Sign Out button .
Carefully read the dialog, then select Confirm.
Tell users how to sign out of a personal device
Users can also directly sign out of personally owned devices that were added using User Enrollment.
They go to Settings on an iPhone or iPad.
They then select the section that displays your organization name and their Managed Apple ID.
Have them scroll to the bottom of the page, then select Sign Out.