Create Managed Apple IDs in Apple School Manager
In Apple School Manager you can create Managed Apple IDs for user accounts.
Managed Apple IDs, roles, and passwords
When you create each account, you assign a role that defines the privileges for that account. If you’re importing from your Student Information System (SIS), the individual doing the import automatically assigns roles.
You can define password policies for each account, and it’s easiest to assign them per role. Student role accounts can have a simpler four- or six-digit passcode. Accounts with all other roles must have strong passwords consisting of at least eight characters. See Role privileges.
Managed Apple ID password complexity
When you add users to Apple School Manager, you set a password complexity for that user. That complexity level dictates which Lock screen appears when a user signs in with Shared iPad. A four- or six-digit passcode shows only digits on the screen. A complex password shows the full keyboard. When the user signs in with their Managed Apple ID and their initial password, they are prompted to change their password using the level of complexity you initially set in Apple School Manager.
If you add Profile Manager as one of your mobile device management (MDM) servers to Apple School Manager, you have the option of merging any users in Apple School Manager to Profile Manager. When you do this, those users appear in the Profile Manager users list. After they appear, you can view their Managed Apple ID password type in the About tab. See Merge Apple School Manager accounts.
Important: If you set the Lock screen behavior to a four- or six-digit passcode and the Apple School Manager setting for that user is set to a complex password, that user must manually enter their Managed Apple ID and password.
Inspect Managed Apple IDs
Organizations can comply with legal and privacy regulations by using Managed Apple ID inspection. Administrator, manager, and instructor accounts can be granted inspection privileges for specific accounts. Inspectors can monitor only accounts that are below them in the school’s hierarchy. For example, instructors can monitor students, and administrators can inspect managers, instructors, and students.
To inspect an account, an authorized user must create special inspection credentials within Apple School Manager for a specific Managed Apple ID. These credentials can be used only to access that Managed Apple ID, and they expire after 7 days. During that period, the inspector can access the user’s content stored in iCloud Drive or in CloudKit-enabled apps. Every request for access is logged in Apple School Manager. Logs show the inspector’s name, the Managed Apple ID in question, the time of the request, and whether or not the inspection was performed. All users with inspection privileges can search these logs, which discourages misuse of inspections.
Create new Managed Apple IDs with verified domain names
In Apple School Manager
, sign in with an account that has the role of Administrator, Site Manager, or People Manager.Click Accounts in the sidebar, then search for an account in the Search field. See How to search.
Select the users from the list.
Click Edit in the Account row, then click the Add button to select what the Managed Apple ID will start with.
You can also enter text, such as a period, in the field.
Select a domain from the list, then click Continue.
Click Close, or wait until the activity has finished, then click Done.
Create new Managed Apple IDs from SIS or SFTP accounts
In Apple School Manager
, sign in with an account that has the role of Administrator, Site Manager, or People Manager.Click Settings at the bottom of the sidebar, click Data Source
below Organization Settings, then click Connect next to SIS/SFTP.Click
next to Create Accounts and Classes, then do one or both of the following:Click Change Settings in the Students row to select what the Managed Apple ID will start with.
Click Change Settings in the Instructor row to select what the Managed Apple ID will start with.
You can also enter text, such as a period, in the field.
Click Save.