How Apple improved enterprise deployments at WWDC

Apple stays targeted on the wants of enterprise IT. With this in thoughts, it made a number of fascinating modifications at WWDC 2022. Here is a rundown of the enhancements Apple introduced we have recognized thus far.

Apple introduced a raft of developer applied sciences

Apple ushered in a spread of enterprise-focused enhancements through the developer periods held on the occasion.

Declarative Gadget Administration

Launched in 2021, declarative gadget administration works to make units extra autonomous and proactive, whereas permitting servers to be light-weight and reactive. It’s now additionally out there for Macs.

Managed gadget attestation

A brand new safety characteristic that makes use of the Safe Enclave to offer robust assurances a few shopper gadget, comparable to its identification and software program model.

Apple Configurator

Apple Configurator for iPhone was launched in 2021. It lets admins add Macs bought outdoors of the traditional channel to their group utilizing Apple College Supervisor (ASM) or Apple Enterprise Supervisor (ABM). When operating Setup Assistant on the Mac, admins simply want to carry an iPhone operating Configurator over the animation. The Mac will then hook up with the web and add itself to your group. At WWDC 2022, Apple prolonged Configurator for iPhone in order that it may well now additionally add iPhones and iPads.

Google Workspace

Consistent with the transfer towards password-less entry, Apple needs to construct programs robust sufficient that customers solely must sign up as soon as after which for that identification to be held throughout the whole lot else. With that aim in thoughts, the corporate confirmed that for Federated Authentication, Apple Enterprise Supervisor now integrates with Google Workspace as an Id Supplier.

Check in with Apple

The corporate mentioned this characteristic can now be be used at work and college with Managed Apple IDs. There are extra security measures baked in, so admins can permit all apps or chosen apps to make use of the sign up software.

OAuth2 assist

That is fairly an essential change. Apple used a token-based authorization system in iOS/iPad OS 15 to permit MDM servers to confirm person identification. This modifications in iOS/iPad OS 16 with the addition of assist for OAuth 2 as one other authorization mechanism. This implies MDM servers will be capable of assist extra identification provision programs suppliers additionally improves safety, and provides one other new characteristic that’s described beneath.

Enrollment Single Signal-on, or Enrollment SSO

This can be a quicker system that allows workers to enroll their private units into your group’s MDM system. The system requires customers to enter their e-mail handle to obtain an enrollment single-sign-on app. The person then indicators in as soon as and the app handles the remainder of the method. The system does require IT and MDM distributors to take sure steps earlier than it’s supported, together with MDM server configuration to make sure the right JSON doc is shared.

Platform Single Signal-On (Platform SSO)

macOS Ventura beneficial properties this new characteristic, which lets customers sign up as soon as on login to routinely signal into apps and web sites. The characteristic, which makes use of a spread of applied sciences — together with third-party SSO extensions, its personal Kerberos extension, FileVault, OAuth, OpenID and so forth — means it’s possible you’ll by no means want to recollect one other web site password, or undergo the method of getting into it, once more, at no compromise to your safety.

Automated gadget enrollment

Apple made an essential change to automated gadget enrollment, one which I think about will make it a lot more durable to setup a misplaced or stolen managed gadget on the market. The corporate says ASM/ABM-registered Macs will need to have an web connection to be setup as soon as erased or restored.

Accent safety

To guard towards close-access assaults, a brand new MDM setting lets directors require a person password earlier than utilizing new Thunderbolt or USB equipment with M-series Apple notebooks. 

Net content material filtering

Admins will be capable of apply Net content material filters and DNS proxies on managed iPhones and iPads operating iOS 16 and iPadOS 16.

Making it simpler to swap eSIMs

It is possible for you to to switch eSims between iPhones utilizing Bluetooth. To take action, simply transfer your older iPhone near your new one and comply with the Set Up Mobile command dialog. Apple additionally put protections in place to make sure customers don’t by accident delete their present eSIM, as doing so requires a brand new one be provisioned.

Shared iPad enchancment

This slight enchancment could make a giant distinction. A brand new command lets admins autosuggest the area identify of your organization when a person begins to enter a Managed Apple ID. That is going to save lots of a whole lot of time for shared iPads, notably when dealing with complicated URLs, because it means spelling turns into much less of an issue.

Accessibility in iOS and iPadOS 16

Apple has added instruments to let MDM programs handle fashionable accessibility settings together with Textual content Measurement, VoiceOver, Zoom, Contact Lodging, Daring Textual content, Scale back Movement, Improve Distinction, and Scale back Transparency. Customers can modify these settings, however it does means units might be made extra accessible from the beginning.

Apple additionally made some keynote bulletins

Apple additionally made a number of bulletins that ought to profit enterprise and enterprise customers throughout its WWDC keynote:

Continuity Digital camera

This allows you to use your iPhone as a webcam and provides a Desktop view to allow you to share video from above your keyboard.

Mail and messages enhancements

The welcome (and long-awaited) introduction of enhancements to Mail search will assist everybody. Scheduled emails, the capability to delete despatched emails and the flexibility to set reminders to return to unactioned emails will all make a giant distinction to workflow. That is Apple enjoying catch-up, as options like these have been out there to different e-mail platforms utilizing instruments comparable to Boomerang.

Metallic 3

Some fascinating enhancements inside Metallic 3 embody the capability to create extra picture lifelike environments and to take additional benefit of graphics reminiscence to drive purposes.

Highlight search

This implies you may get worthwhile internet outcomes at a platform degree. This doesn’t utterly exchange conventional search engines like google, however it’s a desideratum of what’s to return.

Reside textual content

The flexibility to tug textual content (in actionable format) out of photographs and video will make an enormous distinction to customers and opens fascinating potentialities for builders, notably at companies working with worldwide audiences.

Speedy Safety Response

Speedy Safety Response will make a stable distinction to hybrid and distant enterprises because it means Apple can immediately set up safety updates into Macs, iPhones, and iPads. This could assist speed up set up of software program updates throughout companies that till now relied on worker discretion round updating. It additionally means MDM programs don’t want to attend on full updates.

Passkeys

These are essential, as they usher in a very passcode-free future. The transfer ought to vastly scale back enterprise and private vulnerability to phishing.

Have you ever come throughout extra enterprise enhancements introduced at WWDC? Please drop me a line and let me know.

Please comply with me on Twitter, or be part of me within the AppleHolic’s bar & grill and Apple Discussions teams on MeWe.