I have 10 iPads in front of me, all going to the same room at the same site. They are all identical, and in the same smart group receiving the same apps.
All but 1 is accepting the push. The "black sheep" if you will, is the only one displaying this error
"Sign into iTunes to allow "jamf..com" to manage and install apps.
I have wiped the device, unmanaged it, deleted it, and re-enrolled it multiple times but I still get the same error. I have read other "fixes" about the app not having vpp checked but all of the other iPads are working (accepting all the apps) just fine.
Yeah its definitely going into the problem pile.
The app scope is identical, from what I can tell everything is exactly the same for all 10 (which are part of a larger group of 39 that are all working fine)
I thought for sure un-managing and then re-enrolling it would for sure fix it but no luck
Ok so I took each of the two iPads and enrolled them into different groups (3 different groups each with different apps) and it gave me the iTunes error every time.
Its like the error is tied to the device and not to what I'm pushing to it.
Does that make any sense?
An answer could save the lives of two innocent iPads.
I was also getting prompted to login to iTunes and finally with the help of JAMF support got it tracked down to the version of JSS I was running. Upgraded the JSS to the latest and it fixed the issue. The root of it was that some of the iPads were at iOS 10 and the older version of the JSS didn't support it. HTH.
Here's a thing to check that I encountered, might save time troubleshooting...
Go through your mobile app list and check for where you have applied ALL USERS as the scope. If you are doing so, that might prompt the user to sign into the App Store, YMMV. You may find this accidentally applied to your Self Service app, thus creating an initial "delay" in finalizing the initial setup of the device.
After reading through all the comments/recommendations I was able to resolve the "Sign in to iTunes..." issue by going to the app --> general --> and checking the box that states "Make app managed if currently installed as unmanaged".
FYI this was for an app pushed to devices and not a download from Self Service.
https://www.jamf.com/jamf-nation/discussions/27755/self-service-ios-asking-for-itunes-login it's probably self service (or another app) trying to auto-install without VPP licenses. Be sure you have VPP licenses for all scoped apps, and be sure you've ticked the tiny box under the VPP tab on every single app your're scoping.