What’s new for enterprise in iPadOS 16

iPadOS 16 updates improve the stability, performance, or compatibility of your device and are recommended for all users. Device administrators can manage software updates using an MDM solution. 

For information about general improvements, learn about iPadOS 16 updates.

For details about the security content of these updates, see Apple security updates.

• Improves connection reliability in Classroom.
• Managed Apple IDs will be prompted less often to Update Apple ID Settings.
   

• You can now sign in with your managed Apple ID in Software Update to install beta updates. See the documentation on AppleSeed for IT for more information.
• Safari now sets network traffic class based on the WebRTC priority property.
• Resolves an issue where Verizon users were unable to auto-dial conference room numbers.
• The error message “Cannot Send Email” no longer appears when an email sends successfully.
• Text message verification codes now work when using federation with Microsoft multifactor authentication.
   

• MDM can query the model number of managed devices. 
• Profile-based Wi-Fi networks are given auto-join priority over manually joined networks by default.
• Managed Apple IDs will be prompted less often to Update Apple ID Settings.
   

• Resolves an issue that prevented iCloud settings from displaying or setting correctly for users with Managed Apple IDs.
   

• Resolves an issue restoring iPadOS to some iPad models.
• Network extensions that provide content filtering will properly filter web browsing.
• Exchange Mail notifications are delivered more reliably on sleeping devices.
• Mail attachments work more reliably when copied from one message and pasted to another.
• Resolves an issue where VPN profiles failed to update.
• Improves reliability when using Always On VPN and a Global Proxy.
   

• Enrollment single sign-on allows administrators to designate an identity app used to sign in during and after MDM enrollment.
• MDM can now restrict and install Rapid Security Responses.
• MDM can now specify domains where cross-site tracking is allowed in Safari.
• While a user restores from a backup, MDM can now install new apps before all apps included in the backup have been restored.
• Resolves an issue that prevented Siri from initiating calls to managed contacts.
• Resolves an issue in which devices failed to join 802.1X networks after trusting the server certificate.
   

iPadOS 16 includes new features such as Managed Device Attestation and Declarative Device Management support for all enrollment types.

Device Management

• Managed Device Attestation uses the Secure Enclave and cryptographic attestations to secure communications by managed devices when connecting to services such as MDM, VPN, and 802.1X.
• iPadOS 16 supports OAuth 2.0 for User Enrollment.
• Per-app DNS Proxy and per-app Web Content Filter allow user-related data to remain private.
• The Settings MDM command can now configure accessibility settings such as Bold Text, Increase Contrast, Reduce Motion, Reduce Transparency, Text Size, Touch Accommodations, VoiceOver, and Zoom.
• Per App VPN can now be used with user-enrolled devices.
• Apple Configurator for iPhone can now be used to add iPadOS 16 devices to Apple School Manager, Apple Business Manager, or Apple Business Essentials. 

Network

• iPadOS 16 brings support for non-standalone 5G and LTE Private Cellular Networks for physical SIMs and eSIMs, allowing data-only connections on 5G-capable iPad models.

Shared iPad

• In iPadOS 16, administrators can specify default domains to allow users to autocomplete their Apple ID after they type their user name.
• iPadOS 16 will default to using the local passcode for existing Shared iPad users on the device. Administrators can specify a grace period of allowed days before remote authentication is required again.

Bug fixes and other improvements

• iPadOS 16 adds support for PIV Smart Cards and CCID-compliant readers.
• The Managed Pasteboard restriction will now be applied to domains specified in the Domains payload.
• Exchange accounts and Federated Managed Apple IDs will now be able to authenticate with the Allow Account Modification restriction enabled.