Welcome to Overview and Prerequisites.

Now, before you can set up device enrollment in Intune, you have to complete some prerequisite steps. You have to ensure your devices are eligible for Apple device enrollment, you need to configure your domain in Microsoft 365, and you need to set the MDM Authority. You should also create groups in Azure AD to manage your devices and users. Configuring the Intune Company Portal allows you to brand the experience for end-users, so while it’s not “required”, it’s certainly recommended. You’ll also need to assign user licenses in the Microsoft 365 admin center.

Lastly, you’ll need to get an Apple MDM push certificate. This is because an Apple MDM Push certificate is required to allow Intune to manage macOS devices, iOS devices, and iPadOS devices.

Adding the MDM push certificate to Intune allows users to enroll their Apple devices using the Company Portal app and by using Apple's bulk enrollment methods, including Automated Device Enrollment, Apple School Manager, and Apple Configurator. However, I should point out that while enrollment of iOS and iPadOS devices is available through Apple Configurator, enrollment of macOS devices is NOT available through Apple Configurator.

We’ll actually work through a demonstration later that shows you how to set up the MDM push certificate.