Issue: Mobile Devices on iOS and iPadOS 26 or later Booting are occasionally booting into Recovery Mode.
Standard expected workflow: We have Microsoft Entra ID SSO extension configured with the Jamf Setup and Jamf Reset apps. When a user signs out using Jamf Reset three different configuration profiles are removed:
- Profile with a Passcode payload
- Profile with a Restrictions payload
- Profile with a Lock Screen Message payload
When the above profiles are removed, two profiles are installed:
- Profile with a Restrictions payload
- Profile with a Lock Screen Message payload
The issue appears to occur during Jamf Reset sign out as one configuration profile is removed (confirmed by completed command logs) and can vary between the Passcode payload profile or the Restrictions payload profile while the other two commands are left pending.
Example pending commands that occur at the time of issue:
Clear Passcode
Enable App Store
Profile List
Certificate List
I have not been able to reproduce the issue on test iPads on iPadOS 26 or later with the same configuration
Has anyone seen a similar issue involving Jamf Reset, Microsoft Entra ID SSO extension, and OS 26 know the cause of devices having Recovery Mode enabled?
Edit: I am able to restore devices using Apple Configurator and the latest IPSW file and complete enrollment. During standard configuration like registering the device with Entra ID, I am able to sign out using Jamf Reset when I first configure the device and I have seen standard log in/log out of users for 10+ days on different devices.