Linking your Apple Business Manager (ABM) account to Swif makes it easy to automatically enroll Apple devices through the SWIF MDM (Mobile Device Management). You’ll also be able to manage app licenses (via VPP) and enforce device-level settings for all Apple devices in your organization.
Why Link ABM to Swif?
Automatic Device Enrollment: Streamline the onboarding process for new Apple devices (Mac, iPhone, iPad) right out of the box.
Centralized Management: Push policies, configurations, and apps to your Apple devices at scale.
Seamless Updates: Quickly distribute new OS or app updates to all enrolled devices.
Prerequisites
Apple Business Manager Account: Make sure you have admin or management privileges within your ABM portal.
Swif Admin Role: You must be an admin or have permission to configure Linked Accounts in Swif.
Method 1: Self-Service Linking Steps (Recommended)
1. Enter the ABM Organization ID
From Settings → General → Linked Accounts in the Swif admin console, click LINK next to Apple Business Manager.
In the pop-up dialog, under Method 1: Link via ABM Token, enter your ABM Organization ID.
Click Verify.
2. Download the PEM File
Once you click Verify, Swif will generate a PEM link. Copy that link to your browser to download the PEM file. (You can also right-click the link and choose Save As to store the file on your computer.)
3. Upload PEM to ABM
Log in to your Apple Business Manager portal.
Navigate to Settings → Device Management Settings → Add MDM Server (or select your existing MDM server if editing).
Upload the downloaded PEM file to ABM.
Follow the prompts in ABM to confirm the upload.
4. Download the P7M File from ABM
Once ABM accepts your PEM file, it will generate a P7M token.
Download that P7M file to your computer.
5. Upload the P7M File in Swif
Return to the Swif dialog where you initially entered your ABM Organization ID.
Upload the P7M file.
Click Link Account to finalize the connection.
After you’ve completed these steps, you’ll see confirmation that your ABM account has successfully linked to Swif. Once linked, Swif will automatically appear as a recognized MDM server in your ABM settings.
Method 2: Link via Swif Account Creation
If you prefer not to upload tokens yourself, you can let Swif create a new MDM server entry in your ABM account. However, this method is less flexible than uploading the tokens directly. Contact Swif support if you need assistance with this approach.
1. Add Swif as an admin on your Apple Business Manager account
This step enables Swif to create an MDM server in your Apple Business Manager account, which is required for the Swif Devices agent to be automatically installed on any Apple devices ordered through Swif. Log in to your Apple Business Manager account(business.apple.com), go to People -> Accounts, and click on the Add New Account icon located at the top of the page, then enter the following information in the respective fields:
First Name: Swif
Last Name: <Your company name>
Role/address: Administrator
Email: abm+<YourCompanyNameInOneWord>@swif.ai
2. Create a New Sign-in for Swif Admin
Locate the Swif Admin user under Accounts and click on Create New Sign-in.
On the Create New Sign-In window, select Send as an Email and click Continue.
Set Default Device Assignment
After you’ve linked your Apple Business Manager (ABM) account and created the Swif MDM Server, it’s important to configure default device assignment.
This ensures all newly added Apple devices are automatically enrolled into Swif MDM without requiring manual assignment each time.
Steps to Set Default Device Assignment
Sign in to your Apple Business Manager account.
Go to Settings → Device Management Settings → MDM Servers.
Select the Swif MDM Server you created during setup.
Click Edit in the top toolbar.
Under Default Device Assignment, select the platforms you want automatically assigned:
✅ Mac
✅ iPhone
✅ iPad
Click Save to apply your changes.
Note:
When a device is assigned or moved to an MDM server in Apple Business Manager (ABM), the update is not immediate. It may take 15–20 minutes for the assignment to propagate to Swif.
Once the device information is received, Swif will automatically assign the appropriate ABM profile. After the profile is applied, the device will enroll in Swif during the next device wipe or setup (ADE flow).
Why This Matters
Enabling default device assignment ensures that:
All new Mac, iPhone, and iPad devices purchased through Apple or authorized resellers are automatically assigned to Swif MDM.
Devices are ready for zero-touch enrollment, allowing users to set them up securely out of the box.
IT administrators don’t have to manually reassign new devices each time they are added to ABM.
Recommended Configuration
Swif.ai recommends selecting Mac, iOS, and iPadOS under Default Device Assignment to streamline onboarding and ensure every Apple endpoint is automatically managed through Swif MDM.
Verifying Your Setup
Check Swif: In Settings → General → Linked Accounts, the Apple Business Manager section should show “Connected” or “Linked.”
Check ABM: In Apple Business Manager → Settings → Device Management Settings, you should see “Swif” as an MDM server, with the token expiration date listed (usually one year after upload).
Managing Devices After Linking
Automatic Enrollment: Any new Apple device assigned to the “Swif” MDM server in ABM will automatically enroll when first powered on.
Device List in Swif: In the Devices tab, you’ll see your Apple devices populate, along with their enrollment status.
Push Configurations: From Compliance Center or Device Management, push configurations like passcode requirements, VPN settings, or Wi-Fi profiles to all enrolled devices.
Note:
When a device is assigned or moved to an MDM server in Apple Business Manager (ABM), the update is not immediate. It may take 15–20 minutes for the assignment to propagate to Swif.Once the device information is received, Swif will automatically assign the appropriate ABM profile. After the profile is applied, the device will enroll in Swif during the next device wipe or setup (ADE flow).
Check ABM Device Enrollment Readiness in Swif (Mac devices)
After you’ve linked ABM to Swif and configured default device assignment, you can use the ABM Device Enrollment Readiness view to confirm that your ABM‑assigned Mac devices are actually ready for Automated Device Enrollment (ADE).
This helps answer questions like:
“Can Swif see my ABM devices, and are they ready to enroll?”
Where to find ABM Device Enrollment Readiness
Sign in to the Swif admin console.
Go to Settings → General → Device Enrollment Configuration.
Click View Devices to view ABM Device Enrollment Readiness.
If your ABM token is valid and devices are assigned to the Swif MDM server, you’ll see a summary of Mac devices by status.
What the statuses mean
Swif groups ABM‑assigned Mac devices into two main states:
Profile syncing
Includes devices where ABM reports:
profile_status = "pushed", orprofile_statusis empty / not yet set
Swif can see these devices in ABM, but ABM is still pushing or finalizing the MDM enrollment profile.
Devices may not yet be ready for users to complete ADE.
Ready for enrollment
Includes devices where ABM reports:
profile_status = "assigned"
The device is fully prepared by ABM and should present the Swif MDM enrollment screens during the next erase / setup (ADE flow).
When all visible devices are in Ready for enrollment, you’ll see a green “all good” state indicating that ABM is ready for Mac ADE.
Data freshness and delay
ABM doesn’t update instantly:
When you assign or move a device to the Swif MDM server in ABM, it can take 15–20 minutes for:
ABM to update the profile status, and
Swif to display the new state in ABM Device Enrollment Readiness.
To see the latest data, re-open or refresh the Device Enrollment Configuration page after that delay.
Using readiness for troubleshooting
Use this view when ADE doesn’t behave as expected:
Device not listed
Confirm the device is assigned to the Swif MDM server in ABM.
Wait 15–20 minutes and refresh the page.
Device stuck in “Profile syncing”
Check ABM to ensure the profile is correctly pushed.
If needed, reassign the device to the MDM server in ABM, wait 15–20 minutes, then check again.
Device shows “Ready for enrollment” but ADE doesn’t appear on the Mac
Make sure the Mac has been erased or factory‑reset and is starting from the initial setup assistant.
Confirm the serial number in ABM matches the physical device.
If issues persist, collect the device serial number, a screenshot of ABM Device Enrollment Readiness, and what the user sees on the Mac, then contact Swif Support.
Frequently Asked Questions
Q: Do I need to regenerate the token annually?
Yes. Apple tokens typically expire in one year. You’ll need to re-upload a fresh MDM server token (P7M file) to keep your ABM integration active.
Q: Can I manage iOS, iPadOS, and macOS devices with the same ABM link?
Absolutely—one ABM account can handle all Apple device types.
Q: What if the “Verify” step fails?
Ensure your ABM Organization ID is correct, then try again. If it still fails, contact Swif support for assistance.
That’s it! Following these steps will link your ABM account to Swif, letting you seamlessly manage Apple devices across your organization. If you have any additional questions or run into issues, feel free to reach out to Swif Support.