Skip to main content

Fellow Jamf Admins Navigating Managed Apple Accounts & Platform SSO

  • October 14, 2026
  • 1 reply
  • 7 views

Hi Everyone!

 

I recently joined this group searching for fellow Jamf Admins who are responsible for securing & architecting their company’s/environment’s MacBook fleet.

Our company has done diligent prepping to roll out Managed Apple Accounts (via Apple Business Domain Capture).  We are trying to best prep our environment for “Device Choice” within the company.  There are some obvious downsides to rolling out Managed Apple Accounts, but we see it as a means to secure our company issued devices by preventing personal data (iCloud, Facetime, Contacts, subscriptions...) from becoming unrecoverable at user deprovisioning (this has happened before).  

My question for everyone is, how have you gone about managing your MacBook fleet?  Are you implementing Managed Apple Accounts?  Are you taking the “L” when it comes to personal accounts on company issued devices?

 

Thanks,

Charisma

    1 reply

    mattjerome
    Forum|alt.badge.img+16
    • mattjerome
    • Jamf Heroes
    • October 14, 2026

    We just did account federation. Federation is less about managing the device and more about managing the data on the device. Do you want people to be able to use the app store, messages, facetime, etc. Some see it as a benefit, others see as as possible security risk. It’s all about what risks are you willing to take. 

     

    To be clear, you can 100% have a managed Apple fleet without managed apple accounts, you need to consider what you want your end result to be and identify the steps to get there.

    Terms & ConditionsAccessibility statement