Federated Apple ID not allowing signin

[snagrat]

I have setup Azure to provision users into ASM. They all appear, and everything looks fine.

 

When signing into a Shared iPad the password is prompted but then with no error it just returns to the username screen.

 

If I try to sign into school.apple.com then I get the error "-23100 You Apple ID is not allowed to signin to this application"

 

Anyone got any suggestions?

[5tu]

Have you given the "Apple Schools Manager" enterprise app in Azure admin consent?

[snagrat]

Yes I have. I have tried to do it again but makes no different

[5tu]

Is Federated auth turned on in ASM? https://support.apple.com/en-gb/guide/apple-school-manager/apdb02f73f18/web

[snagrat]

Yes it is on, although I am turning it off now and will turn back on. See if that helps

[Brimstone]

I have setup Azure to provision users into ASM. They all appear, and everything looks fine.

 

When signing into a Shared iPad the password is prompted but then with no error it just returns to the username screen.

 

If I try to sign into school.apple.com then I get the error "-23100 You Apple ID is not allowed to signin to this application"

 

Anyone got any suggestions?

When, as Azure Federated you sign into a Shared iPad for the 1st time you then have to create a new passcode/password then whene you sign in again you use the passcode you created?

[Brimstone]

I have setup Azure to provision users into ASM. They all appear, and everything looks fine.

 

When signing into a Shared iPad the password is prompted but then with no error it just returns to the username screen.

 

If I try to sign into school.apple.com then I get the error "-23100 You Apple ID is not allowed to signin to this application"

 

Anyone got any suggestions?

I assume the iPad you are signing into has 32GB? 16GB is not supported.

[snagrat]

I assume the iPad you are signing into has 32GB? 16GB is not supported.

 

These are new 8th gen 32GB models.

 

Should the student be able to sign into school.apple.com? I was using that as a test being as the iPad gives no errors.

 

I am able to sign in to appleid.Apple.com with the federated account.

 

I might try the iPad off the network to see if it is the firewall or filter later today.

[Brimstone]

These are new 8th gen 32GB models.

 

Should the student be able to sign into school.apple.com? I was using that as a test being as the iPad gives no errors.

 

I am able to sign in to appleid.Apple.com with the federated account.

 

I might try the iPad off the network to see if it is the firewall or filter later today.

What type of account is this, students accounts do not have access to Apple School Manager?

[snagrat]

It was a student account.

 

I managed to fix it by assigning a temporary pin in ASM and that allowed them to login and change it.

 

I’m not sure why the iPad wasn’t asking to create a pin at first login.

 

Not sure school want it now though as the iPads are for Nursery children.