ADE (Automated Device Enrollment)

How it works

The acronym has a history worth knowing. Apple launched the Device Enrollment Program (DEP) in 2014 as a standalone portal. In 2018 the portal was folded into Apple Business Manager, and at WWDC 2019 Apple renamed the feature itself Automated Device Enrollment. The mechanics never changed, so any document that says DEP, ADE or "zero-touch for Apple" describes the same thing.

What the mechanism does is simple to state. A device is registered in Apple Business Manager by the reseller or with Apple Configurator, then assigned to an MDM server. At activation, Setup Assistant asks Apple whether the serial number belongs to an organization, receives the server address, and enrolls right there, between the language and Wi-Fi screens. The MDM decides which setup panes to skip, whether to require a login, and applies supervision and the first restrictions. Two to three minutes on a decent Wi-Fi connection.

Because the assignment lives in Apple Business Manager rather than on the device, a factory reset just repeats the process. That's the property that makes ADE different from a QR code or a link: management survives the user.

The full entry on Automated Device Enrollment covers Setup Assistant options, supervision and the limits for devices bought at retail.

Why it matters for a fleet

ADE is the reason a company can ship sealed boxes to a warehouse in another city and have every iPad managed by lunch. It's also the only way to supervise a device without a USB cable, and supervision unlocks single-app mode, silent app installs and Activation Lock bypass.

In practice, the acronym shows up where it matters: an RFP asking whether the MDM "supports ADE", a reseller asking for your "DEP ID" (now the organization ID in ABM), a device that says "This iPhone is managed by your organization" at setup. Recognizing that these are all one feature saves confusion during a rollout.

The constraint is unchanged since 2014: ADE only applies to devices present in Apple Business Manager. A retail purchase needs Apple Configurator to be added, within a 30-day window during which the device can still be released.

How Appaloosa handles it

Appaloosa registers as an MDM server in Apple Business Manager, and any device you assign to it enrolls through ADE at first boot: supervised, non-removable, with Setup Assistant panes and mandatory authentication configured per device group, then apps from Apps and Books and your internal catalog. A wiped device re-enrolls the same way on its next setup. The iPhone and iPad specifics are on the iOS MDM page.