DEP Apple ID

[TomDay]

Doug and Leigh thanks very much for you preso today, very informative. I have a follow up question as I begin to set up my account for DEP. I think I remember you saying to create a completely new Apple ID when starting with DEP? I currently have an Apple ID that I use with GSX and VPP, am I correct that I am to avoid using this existing Apple ID that I have?

Thx, Tom

[ewu-it]

Tom,

I can answer that question as I have started that discussion with our Apple support engineer. According to our conversation... Yes, you have to create a new Apple ID for use with your DEP master account. Once you have your DEP master account setup and provisioned with Apple, you can then ask them to migrate your VPP data over to the new DEP master account. That will allow you to control both through deploy.apple.com. Your GSX master account will have to stay separate ("for now" are the words used my our Apple support engineer).
-- Howard Griffith
Help Desk Supervisor
Eastern Washington University

[dpenny]

Howard beat me to the punch. I have been told the same thing; you need to create a completely new Apple ID for use as the DEP master account.

[TomDay]

Terrific thanks Guys, having some fun on a Saturday night with this. Follow up question regarding accounts, with the new Apple ID set up did you turn on 2 step verification? I'm hesitant to do so unless its necessary since this new DEP account will be shared by a couple of us and I don't want just 1 mobile phone number attached to it.

-Tom

[TomDay]

NM, I went ahead and looked further and saw I can add multiple mobile devices. Also realized I couldn't log into deploy.apple.com without 2 step being setup on my new apple ID.

[dpenny]

@tommyday
Just as a follow-up. Once you create the master account, you can add additional users who can use their own Apple ID for logging in.

Doug

[jarednichols]

What we recommend is having that Apple ID that you create actually be a distribution list of some manner so that you can easily add or remove people from that role on your end without having to do anything on the Apple ID itself. It's way more future-proof if you do it that way, even if you only have 1 person on that distribution list for now.

[TomDay]

Got the master account created with additional users and the master is associated with a distro list, thx!

[cwaldrip]

following up on this three years later... we just get setup with DEP and it's beyond annoying to have to use a separate AppleID. First, it has to be an AppleID that users a corporate email address, second it can't use an existing corporate email address. So I've had to go to our email admins and explain why i need multiple email addresses (at least they can be aliases). I can see where you might need at least three separate corporate email addresses (GSX, VPP/DEP, and whatever else).

And apparently if the account I'm using with DEP changes its password or is removed, then we have to re-enroll our JSS in DEP as the credentials are part of the keys provided by DEP to the JSS. And since it requires 2FA it'll be fun when I leave and keep my phone with me so that no one else can authenticate without jumping through hoops to bypass 2FA.

...annoying...

[chriscollins]

You can add multiple phone numbers to MFA. We have multiple people whose numbers are added to the primary account for that reason.