Skip to main content

Glossary

Declarative Device Management (DDM)

Declarative Device Management (DDM) is Apple's newer management model, introduced at WWDC 2021 with iOS 15. Instead of the server sending commands one by one and polling for status, it sends declarations describing the desired state, and the device applies them and reports changes on its own.

How it works

Classic Apple MDM is imperative. The server pushes a command ("install this profile"), waits for an acknowledgment, then queries the device to check the result. Multiply that by 2,000 devices and a dozen settings, and the server spends its time asking questions.

DDM flips the model. The server sends a declaration: a configuration (what to apply), an activation (when it applies, using predicates on device state) and asset references (large payloads fetched separately). The device evaluates the predicates locally. If a condition changes, say the OS version crosses a threshold, the device applies the right configuration itself and sends a status report. No round trip.

Apple extended DDM to all enrollment types in iOS 16, added software update enforcement in iOS 17 (2023) and has since routed new management features through declarations rather than legacy commands.

Why it matters for a fleet

Two practical gains. First, speed: a device that goes offline for a week catches up on its own the moment it reconnects, with no queue of stale commands. Second, reliability: the device reports actual state, so the console shows what is true rather than what was sent.

The strategic reason is that Apple has said new capabilities will arrive in DDM first. Managed software updates with deferral and enforcement deadlines are already declaration-only. If your MDM doesn't speak DDM, some iOS 17 and later controls won't be available to you.

For the admin, none of this changes daily work. It changes what happens behind the button.

How Appaloosa handles it

Appaloosa manages iOS, iPadOS and macOS through Apple's management framework, with supervised enrollment via Apple Business Manager, security policies and app distribution through Apple VPP. Declarative management is the direction that framework is taking, and it's the channel through which Apple's newer controls reach a managed device. The admin sees the outcome in the console: policies applied, updates enforced, compliance reported. Apple coverage is described on the Mobile Device Management page.

Explore

See the full platform

Enrollment, apps, security, remote support: all in one place.

Explore Appaloosa

Ready to try Appaloosa? Start free

Frequently asked questions

Does DDM replace configuration profiles?
Not yet. Profiles still work and remain the only way to deliver many payloads. DDM adds declarations alongside them, and Apple has been moving specific features (software updates, passcode policy, some restrictions) to declarations first. Expect a long coexistence rather than a hard switch.
Which devices support Declarative Device Management?
Devices running iOS 15, iPadOS 15 and macOS 13 or later for user-enrolled devices; iOS 16, iPadOS 16 and macOS 13 extended it to all enrollment types including supervised and automated enrollment. Apple TV and visionOS also support it.
Do I need to do anything to enable DDM?
No. Activation is negotiated between the device and the MDM server at enrollment or first check-in after an OS update. If your MDM vendor supports it, eligible devices switch automatically. Nothing changes in how you assign policies in the console.