Linking your Apple Business Manager (ABM) account to Swif makes it easy to automatically enroll Apple devices through the SWIF MDM (Mobile Device Management). You’ll also be able to manage app licenses (via VPP) and enforce device-level settings for all Apple devices in your organization.
Why Link ABM to Swif?
Automatic Device Enrollment: Streamline the onboarding process for new Apple devices (Mac, iPhone, iPad) right out of the box.
Centralized Management: Push policies, configurations, and apps to your Apple devices at scale.
Seamless Updates: Quickly distribute new OS or app updates to all enrolled devices.
Prerequisites
Apple Business Manager Account: Make sure you have admin or management privileges within your ABM portal.
Swif Admin Role: You must be an admin or have permission to configure Linked Accounts in Swif.
Self-Service Linking Steps (Recommended)
Enter the ABM Organization ID
From Settings → General → Linked Accounts in the Swif admin console, click LINK next to Apple Business Manager.
In the pop-up dialog, under Method 1: Link via ABM Token, enter your ABM Organization ID.
Click Verify.
Download the PEM File
Once you click Verify, Swif will generate a PEM link. Copy that link to your browser to download the PEM file. (You can also right-click the link and choose Save As to store the file on your computer.)
Upload PEM to ABM
Log in to your Apple Business Manager portal.
Navigate to Settings → Device Management Settings → Add MDM Server (or select your existing MDM server if editing).
Upload the downloaded PEM file to ABM.
Follow the prompts in ABM to confirm the upload.
Download the P7M File from ABM
Once ABM accepts your PEM file, it will generate a P7M token.
Download that P7M file to your computer.
Upload the P7M File in Swif
Return to the Swif dialog where you initially entered your ABM Organization ID.
Upload the P7M file.
Click Link Account to finalize the connection.
After you’ve completed these steps, you’ll see confirmation that your ABM account has successfully linked to Swif. Once linked, Swif will automatically appear as a recognized MDM server in your ABM settings.
Alternative Method: Link via Swif Account Creation
If you prefer not to upload tokens yourself, you can let Swif create a new MDM server entry in your ABM account. However, this method is less flexible than uploading the tokens directly. Contact Swif support if you need assistance with this approach.
Step 1 - Add Swif as an admin on your Apple Business Manager account
This step enables Swif to create an MDM server in your Apple Business Manager account, which is required for the Swif Devices agent to be automatically installed on any Apple devices ordered through Swif. Log in to your Apple Business Manager account(business.apple.com), go to People -> Accounts, and click on the Add New Account icon located at the top of the page, then enter the following information in the respective fields:Step 2 - Create a New Sign-in for Swif Admin
Locate the Swif Admin user under Accounts and click on Create New Sign-in.
On the Create New Sign-In windows, select Send as an Email and click continue.
Verifying Your Setup
Check Swif: In Settings → General → Linked Accounts, the Apple Business Manager section should show “Connected” or “Linked.”
Check ABM: In Apple Business Manager → Settings → Device Management Settings, you should see “Swif” as an MDM server, with the token expiration date listed (usually one year after upload).
Managing Devices After Linking
Automatic Enrollment: Any new Apple device assigned to the “Swif” MDM server in ABM will automatically enroll when first powered on.
Device List in Swif: In the Devices tab, you’ll see your Apple devices populate, along with their enrollment status.
Push Configurations: From Compliance Center or Device Management, push configurations like passcode requirements, VPN settings, or Wi-Fi profiles to all enrolled devices.
Frequently Asked Questions
Q: Do I need to regenerate the token annually?
Yes. Apple tokens typically expire in one year. You’ll need to re-upload a fresh MDM server token (P7M file) to keep your ABM integration active.
Q: Can I manage iOS, iPadOS, and macOS devices with the same ABM link?
Absolutely—one ABM account can handle all Apple device types.
Q: What if the “Verify” step fails?
Ensure your ABM Organization ID is correct, then try again. If it still fails, contact Swif support for assistance.
That’s it! Following these steps will link your ABM account to Swif, letting you seamlessly manage Apple devices across your organization. If you have any additional questions or run into issues, feel free to reach out to Swif Support.