If your school uses iPhone, iPad, Mac, Apple TV, Apple Watch, or even Apple Vision Pro, Apple School Manager (ASM) is the starting point to get everything up and running smoothly. This portal unifies volume purchasing, account creation, automatic device enrollment, and assignment to an MDM service. (device management) to ensure a smooth and consistent start-up.
Far from being just another tool, ASM integrates with your existing infrastructure: identity services, student information systems, and MDM solutions. This allows you to automate repetitive tasks, reduce errors, and maintain total control. of apps, settings, and data. Below you'll find a step-by-step guide, with requirements, key features, and third-party integrations, to get it up and running smoothly from day one.
Overview and availability of Apple School Manager
Apple School Manager is a web portal for IT administrators in education that centralizes the management of the Apple ecosystem. It works hand in hand with your MDM solution. to distribute content by volume, configure devices, and manage educational community accounts.
Before you launch, it's a good idea to confirm if the program is available in your country or region. Apple publishes an official list with the availability of programs and payment methods For education and businesses; check it to avoid surprises with bulk purchases or specific features.
In your day-to-day life, ASM allows you to: automate device enrollment (without physically touching them), buy apps and books in bulk, and Provision Managed Apple Accounts with IT and privacy controls appropriate for the school environment.
The portal also offers function-based access (Administrator, Manager, Staff, Teacher, Student) to define tasks and access. This allows teachers and students to log in to Apple services and apps like Classroom and Classwork when appropriate.
Key features: what you can do with ASM
Automatic Device Enrollment (ADE)When you purchase devices from Apple or an authorized reseller/carrier and associate them with your organization, you can enroll them in MDM without unboxing them. The setup wizard is simplified so the user can start working right away.with policies implemented from minute one.
Buy apps and books in bulkASM coordinates the bulk acquisition and allocation of licenses to users or devices, even if the App Store is disabled. You retain ownership of the apps and can revoke and reassign licenses. in any country where they are available.
Managed Apple AccountsThese are accounts belonging to the organization, separate from personal accounts. They allow IT controls, password resets in certain cases, and access to iCloud services, iWork collaboration, Notes, and Reminders.In addition, those with the roles of Administrator, Manager, Staff, or Teacher can access the ASM web portal.
Roles and web portal: role-based management makes it easier to delegate responsibilities without opening the door to everyone. Teacher and Student profiles can use apps like Classroom and Classwork, while the IT team maintains governance of the environment.
MDM IntegrationASM does not replace your MDM, it enhances it. From the MDM you can define settings, distribute apps, apply policies, and automate workflows that ASM provides with account information and device assignments.
Preparations and requirements before starting
Compatible browsersTo work with ASM, use Safari (iOS/iPadOS or macOS), Google Chrome, or Microsoft Edge on Windows. Make sure you have up-to-date versions to avoid crashes or incompatibilities. during registration and management.
Initial accountWhen registering the organization, you are asked to create an account for the person who represents the institution. You will need a professional email address not linked to iTunes/iCloud or other Apple services, in addition to basic employment data (position and professional telephone number) and acceptance of license agreements.
Verification contactApple will verify that the person with legal authority can accept the terms on behalf of the institution. This contact should not be the same one who sends the registration, and will be validated during the process.
Institution data: prepare the corporate information of the center (name, domains, etc.). Check your email filters to avoid receiving communications from apple.com and expedite the approval process.
With these basics ready, you will move on to linking providers and configuring the MDM. Having everything prepared from the start avoids delays in the arrival of devices in classrooms.
Step-by-step implementation in Apple School Manager
Step 1: Connect with Apple or a participating retailerAssociate your Apple customer number or authorized reseller/carrier number with ASM. After linking, orders for iPhone, iPad, Mac, Apple TV, Apple Watch, and Apple Vision Pro will automatically appear in the portal. so you can manage them.
Step 2: Link your MDM serviceBefore assigning devices, you need at least one MDM server registered with ASM. You can add more servers when you need them., depending on the educational venues or stages.
Step 3: Add the devices to ASMEquipment purchased with your customer/distributor number is automatically added. You can also manually add existing devices with Apple Configurator for iPhone or for Mac if you want to bring them under government control.
Step 4: Assign devices to an MDM serverAs soon as a device appears in ASM, assign it to a specific MDM server. You can do it manually or define automatic allocation rules by device type or by origin.
Step 5: Enroll devices in MDMUpon enrollment, the MDM applies policies, apps, and restrictions. Registration can be automatic (zero touch) or initiated by the user, according to the center's deployment strategy.
Authentication linked with Google Workspace, Microsoft Entra ID, or other IdPs
ASM integrates with external identity services through linked authentication. This allows teachers and students to use their corporate credentials (usually your institutional email and password) to sign in as a Managed Apple Account.
With this federation, the user can log in on a shared iPhone, iPad, Mac, Apple Vision Pro, or iPad, and from there, also access the web version of iCloud using the same credentials. Check the operating system requirements for the devices. to ensure compatibility with linked authentication in your park.
Domain capture and account transfer
By verifying your domain, the organization can Manage all Apple Accounts that use itThis prevents mixing personal and corporate data and protects educational resources associated with the institution's accounts.
If some staff members created personal accounts with the center's domain in the past, ASM offers processes for capturing the domain and transferring accounts.so that they become accounts managed by the organization when appropriate.
Integration with SIE/SIS and automation with SFTP
ASM connects with your Student Information System (SIE/SIS) to Import classes, lists, and profiles of managers, staff, faculty, and studentsThis integration can be done natively or via SFTP.
Apple has incorporated synchronization improvements using Claris Connect. You can filter by centers and courses and avoid duplicates during data import, which reduces errors and subsequent cleanups.
When you connect the SIE/SIS, Relevant information is periodically replicated in ASMImportant: ASM does not write data back to the SIE/SIS, it only consumes it to generate accounts and classes in the Apple environment.
If you prefer manual uploads, you can upload .csv files using Apple templates or OneRoster 1.1 format. These templates minimize formatting errors. and they speed up the registration of accounts and groups.
For organizations with mixed processes, combining synchronization with SIE/SIS and one-off SFTP uploads may be ideal. This is how you handle exceptions without breaking automated processes who keep the school directory up to date.
Apple Configurator and reassignment to MDM
If you add a device using Apple Configurator, it will appear in ASM within the “Apple Configurator” group. From there you can reassign it to your MDM server so that it stops using Configurator's enrollment settings and starts obeying MDM policies.
Guidance process with appropriate roles (Administrator, Site Manager —when applicable— or Device Enrollment Manager): Sign in, filter by source “Added manually” and Apple ConfiguratorLocate the equipment and proceed to change the server.
- Go to Devices and filter by source to find the add-ons with Apple Configurator. This way you reduce noise and get to the point..
- Select one or more devices and choose to edit the “device management service”. Choose to assign to the appropriate MDM server to your headquarters or stage.
- Confirm the operation. An activity will be generated with the result (assigned, reassigned, or unassigned). You can wait until it's finished or keep working while it is being processed.
Once assigned, the device will receive policies from the chosen MDM and It will be fully integrated into your management workflows.
Account-based enrollment and data separation
Account registration offers a convenient way for users to set up their device by logging in with their managed Apple Account. It allows coexistence with a personal account. on the same device, keeping work and personal data separate.
This approach respects user privacy while IT controls corporate apps, settings, and services. Additionally, ASM allows you to configure the detection of alternative services in verified domains. and set the default assignment of devices (iPhone, iPad, Mac and Apple Vision Pro) to specific MDM servers.
Security and privacy certifications
To comply with regulatory and contractual requirements, Apple maintains certifications under the ISO/IEC 27001 and 27018 standards. These certifications independently accredit security and privacy practices of the relevant services, including Apple School Manager and Apple Business Manager.
Beta program: Test features before launch
Your organization can participate in beta testing within ASM. This allows you to validate new features in your network and infrastructure with controlled groups, guaranteeing internal support when the feature becomes generally available.
MDM in an Apple-first environment
Park management is the other pillar of the deployment. Apple-focused MDM solutions, such as Jamf, help secure and manage devices and data without sacrificing the user experience. ASM and MDM together form the tandem that enables a modern, secure, and easy-to-maintain learning environment.
Having the links with distributors, the MDM, the SIE/SIS and the linked authentication ready, along with volume purchasing and managed Apple Accounts, It makes the entire device lifecycle predictable and efficient. from the moment it comes out of the box until changes hands or withdraws.
When you align all these elements—portal, identities, academic data, purchasing, and administration—, Implementation ceases to be a last-minute sprint and becomes a repeatable and controlled process Regarding licensing, configuration, and compliance.
It is clear that ASM does not only reduce manual labor: It also strengthens security, improves the experience for students and teachers, and facilitates scalability. as locations, classes, and devices grow at the center.
