Automatic local account creation

Please note that this feature is only available for macOS

When enrolling devices through the Apple Device Enrollment Program (DEP), as part of the Apple Business Manager integration, you can automate the local user account creation as part of the provisioning process. Below you can see how you can automate local account creation under the following use cases:

  • Pre-defined account configuration by the IT administrator.
  • Pre-filled account creation based on Single Sign-On information.
  • Automatic account creation based on Single Sign-On information.

Configuring local accounts in Smart enrollments #

The first step is to create a new smart enrollment (you can learn how to do it here) and configure the Account configuration.
During the automatic local account creation, you will be able to configure the Admin account details (including password) and Primary account details. The primary account will be created as an admin account by default unless it is set as a standard account in the form. It can be locked so that the user cannot modify the data during device configuration.

Please note that by Apple design, the Primary account password can not be remotely configured. It must be created during device configuration by the user.

Using SSO user data in forms #

When integrating any Single Sign-On provider in Applivery, we will be able to retrieve from the Identity Provider directory some of the user data fields as variables so that you can use them to automatically fill out some fields, for instance, for automatic local account creation in Apple Device Management for MacOS.

Below you can see the entire list of fields that will be accessible:

  • {{sso.firstname}} User’s first name
  • {{sso.lastname}} User’s last name
  • {{sso.username}} User’s username
  • {{}} User’s full email address
  • {{}} User’s email address username

Note that you can combine the tags above to create complex structures such as the following one:
{{sso.firstname}}.{{sso.lastname}} will be automatically translated to daniel.garcia if {{sso.firstname}} contains the value daniel and {{sso.lastname}} contains the value garcia.

Updated on June 3, 2024
Was this article helpful?

On this page

— talk to an expert —

Schedule a demo