Force Apple ID sign-in to federated accounts

[bayley]

We have managed iPhones in Apple business manager synced with JAMF Pro. We have federated our domain so our business email addresses can be used as Apple IDs. Is there are way to only allow our business federated email addresses (now Apple IDs) to be used to sign in on our managed devices? We've had a few people sign in to our managed phones with their personal iCloud/Apple ID accounts, and it syncs their apps and wallpapers across both devices, as well as connects both phones. 

[jbisgett · Accepted solution]

See my recent thread for this exact issue:

https://community.jamf.com/t5/jamf-pro/ipads-managed-appleids-enforcement/td-p/255505

Currently, Apple does not offer a way to manage what accounts can use iCloud on a managed device. You can, however, block the ability for end users to access the App Store completely, as well as prevent automatic downloads of apps installed on another device by the same AppleID.

I would recommend filing feedback with Apple regarding our need for this capability.