Support access management for Managed Apple IDs

fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)

https://fleetdm.com

Other

2.93k stars 409 forks source link

Support access management for Managed Apple IDs #21390

Open lashomb opened 3 weeks ago

lashomb commented 3 weeks ago

Problem

Allowing Managed Apple Accounts to only be used on managed devices.

Proposed Solution

Apple has a GetToken API that facilitates this.

For the service type com.apple.maid, the Apple Identity Service requests this token when a Managed Apple ID is signing in. It’s used to verify that the Managed Apple ID belongs to the same organization as the MDM server that enrolled the device.

nonpunctual commented 3 weeks ago