Support account-driven user enrollment
Initially announced at WWDC21 [1], macOS, iOS, and iPadOS devices starting with iOS15 and macOS Monterey support a workflow called account-driven user enrollment [2]. This workflow differs from the existing user enrollment methodology in that it uses a slightly different protocol and requires the implementation of a session token on the MDM provider side.
We are interested in the account-driven workflow because it removes the need to distribute enrollment profiles or have users visit an enrollment URL and download / install the profile. The improved UX, when combined with this year's promised release of federated authentication to more providers in ABM, should allow customers to offer a hassle-free, non-ticket-generating BYOD enrollment for both macOS and iOS.
References:
[1] https://developer.apple.com/wwdc21/10136
[2] https://support.apple.com/guide/deployment/user-enrollment-and-mdm-dep23db2037d/web
Account-Driven Enrollment is now supported!