---
title: "Enrolling iOS devices with Sign in to Work or School option"
slug: "enrolling-ios-devices-with-sign-in-to-work-or-school-option"
tags: ["AUE", "enroll iOS", "sign in to work or school"]
updated: 2026-08-19T05:41:03Z
published: 2026-08-19T05:41:03Z
canonical: "help.scalefusion.com/enrolling-ios-devices-with-sign-in-to-work-or-school-option"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enrolling iOS devices with Managed Apple Id using Sign in to Work or School

**Account Driven User Enrollment** offers a streamlined way for employees to enroll their employee-owned/personally owned iOS devices using managed Apple IDs via the Sign in to Work or School option in Settings. This approach simplifies the onboarding process and supports a BYOD strategy by keeping work data logically separated from personal content.

Traditionally, configuring Account Driven User Enrollment required IT admins to host the **com.apple.remotemanagement** **file** in the **.well-known** directory of their domain—a task that often involved coordination with DevOps teams, leading to unnecessary delays. To simplify this process, Apple has introduced a new way to configure the discovery URL via MDM and AB/ASM tokens, available starting with iOS 18.2 and iPadOS 18.2.

This document outlines the steps required to enable Account Driven User Enrollment using the Sign in to Work or School option, making it easier for IT teams to manage iOS devices with Scalefusion.

## Pre-requisites

1. You should have **managed Apple IDs**. These are the IDs provided by Apple when you have an Apple Business or Apple School Manager account.
2. The managed Apple IDs should be imported on the Scalefusion Dashboard under User Enrollment
3. **Minimum Supported OS:** iOS 18.2 and iPadOS 18.2
4. [Apple User Enrollment Profile](/docs/create-apple-user-enrollment-profile) is created
5. Users should be assigned a [User Group](/v1/docs/user-groups) with an Apple User Enrollment Profile.
6. Your domain name should be verified in Apple Business or Apple School Manager

To enroll devices using this approach, proceed with the following steps:

## Step 1: Configure Account Driven User Enrollment Settings

APNS should be configured on the dashboard before configuring these settings

1. On the Scalefusion Dashboard, navigate to **Getting Started > Apple Setup > Account Driven User Enrollment**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-5L7CZUJL.png)
2. There are two tabs under Account Driven User Enrollment Settings, viz.
  1. **Enrollment Settings:** Allows you to configure basic enrollment settings. They are:
    1. **Show Terms of Use during Enrollment:** If enabled, Users will be shown the Terms of Use configured in Organization Info before they enroll the devices.
    2. **Force Sign In again After:** Users will be asked to sign in to Work or school again after the configured time. Select time from the drop-down:
      1. Never
      2. 8 hours
      3. 12 hours
      4. 24 hours
      5. 36 hours
      6. 48 hours
      7. 72 hours
  2. After configuring, click **Save Settings.**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-SVH4OCFR.png)

### **A. Domain Configuration**

Should you choose to host the JSON file within your verified domain, the next step involves downloading the file. To proceed:

1. Click **Download JSON** to download the file.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-RHK8E94X.png)
2. Please rename the downloaded file to **com.apple.remotemanagement**
3. Now host it on your domain. For example, if your domain name is 'onplex.com', then download the JSON file and host it at [*https://*onplex*/.well-known/com.apple.remotemanagement*](https://*onplex*/.well-known/com.apple.remotemanagement)

> [!NOTE]
> Note:
> 
> Please ensure and confirm the content type for this file is set to application/json. This may also be known as MIME type in some server softwares

#### How to host a JSON file

After downloading the JSON file (from **Domain Configuration**) and renaming it to **com.apple.remotemanagement** (ensure there is no file extension), follow these steps:

1. **Move** the File to Your Domain / Website Directory
  1. Log into the server where your website is hosted.
  2. Navigate to the root directory of your website (e.g., /var/www/domain.com).
2. **Create** the **.well-known** Directory
  1. Inside the root directory, create a new directory named **.well-known** (This is a standard directory used for specific purposes, such as hosting files like this one)
3. **Place** the Renamed File in the **.well-known**Directory
  1. Move the renamed **com.apple.remotemanagement** file into the **.well-known** directory.
4. **Set** the Correct Permissions
  1. Ensure that the **.well-known** directory and the **com.apple.remotemanagement** file have the appropriate permissions to be accessed publicly.
5. **Set** the Correct MIME Type
  1. To ensure the file is served with the correct content type, you need to configure your web server to set the MIME type for the file to ***application/json***.
  2. This can typically be done by modifying the web server's configuration (for example, Nginx or Apache) to explicitly set the MIME type for **.well-known/com.apple.remotemanagement** to ***application/json***.
6. Verify the File is Accessible
  1. Once the file is placed and the MIME type is set, check if the file is accessible through the browser at: ***https://yourdomain.com/.well-known/com.apple.remotemanagement***
7. You should see the JSON content if everything is set up correctly.

1. After hosting the file, go to Domain Configuration, click **Add Domain**, type the domain name, and **save** the changes.
2. If the file is successfully hosted, you will see the green tick mark next to the added domain(s).

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-ZI9TOHG4.png)
3. You can add up to **25** Domains.

> [!NOTE]
> Note:
> 
> Even if you've already completed the Domain Configuration, you can still add your domain here to check its status. This allows you to verify whether the JSON file has been successfully hosted.

### **B. Alternate Discovery via Apple Business / Apple School Manager**

If you opt to configure the server tokens for which the Discovery URL should be set, proceed with the following steps:

1. Please make sure that you have completed the **ADE setup**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1CLZFSA5.png)
2. Click **Add ADE Server** to add the server token. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-TAWCV70G.png)
3. You will be able to see all the ADE servers that you have added and select them. Click **Save**. You can add up to **25 servers**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-4P56HIOP.png)
4. Next, navigate to your AB account to assign MDM servers to iOS and iPad devices.
  1. Go to Devices and open Management Services. Here, select Default Device Assignment.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-K319FPW2.png)
  2. Change the default assignment for iPad and iPhone to the MDM server selected in the Scalefusion dashboard.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-JIKQ7FTL.png)

## Step 2: Enrolling an iOS device

After configuring Account Driven User Enrollment settings, follow these steps on your iOS device to enroll it with Scalefusion:

1. Navigate to the **Settings** app on the device and go to **VPN & Device Management**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-JOBWXAF4.png)
2. Click on **Sign in to Work or School account,** under VPN & Device Management

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-6OM26BOK.png)
3. Here, enter your **managed Apple ID** and click **Continue**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-6TMDYMNK.png)
4. You will be directed to the **Terms of Service** page. Review the terms and click **Accept**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-WRAUX4DG.png)
5. Now, click **Confirm** on this screen. An OTP will be sent to your registered email ID.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-22491ISW.png)
6. On the next screen, enter the **OTP** (you have received on the email ID) and click **Confirm**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-KMP4CABW.png)
7. On the next screen, click on **Sign In to iCloud**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-OFAIGWKO.png)
8. Now, enter the **password** for your managed Apple ID and click **Sign In**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-XRYO93WN.png)
9. On the next screen, click on **Allow Remote Management**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-X4XBNW1N.png)
10. It may take a few minutes to configure. You will get the screen to wait.
11. Once done, you will see the following screen showing the managed Apple ID under Managed Account. This confirms that the enrollment process is complete, and your device is now managed. The applications and policies pushed by your IT Admin will start getting installed.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-YWDPC1JX.png)

## Frequently Asked Questions

**Question:** While enrolling an iOS device via Account Driven User Enrollment, the users get an error **Sign-In Failed**. What can be the reason?

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-AYAHMSLA.png)

**Answer:** It appears the server is not configured to correctly identify the file type. Please ensure and confirm the content type is set to ***application/json***. This may also be known as MIME type in some server softwares.

**Question:** Will the process of enrollment be same if I have a GSuite/O365 account?

**Answer:** If you have a GSuite/O365 account federated, the process is slightly different. On the device, you will be asked to authenticate with the respective provider after accepting Terms & Conditions. Hence,

1. After [Step #4](/v1/docs/enrolling-ios-devices-with-sign-in-to-work-or-school-option#step-2-enrolling-ios-device) (mentioned above) you will get the following screen. Click on **Authenticate**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-SFRWHIPO.png)
2. This will take you to the Microsoft authentication screen (this is for an O365 account). Select your **Apple ID**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-PQ8QDA8K.png)
3. Enter the password and click on **Sign In** to authenticate.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-SIPZJDJY.png)
4. Once authenticated, you will get the screen to **Sign In to iCloud** (Step #7 above). After that, the steps will be the same as above for enrolling the device.