Federated Login not allowed

[petben]

I have setup 365 federated login in Apple School Manager, all the accounts have synced. I can sign into Apple.com, iCloud.com etc with one of these [email protected] accounts, BUT when going through first setup on a supervised wiped iPad that has an enrolment profile on it, it asks for Apple ID, then goes to 365 login, I enter the email and password and it says:

 

You cannot log into this device using this Apple ID.

 

 

Mm, any ideas?

[willtech]

You use logging in with a user with a role of Administrator or People Manager ?

[petben]

Unfortunately not, the user is of type 'staff'.

 

It is strange all connectors/apps/users are valid and working. Just no one can sign in with their managed Apple ID's when rebuilding iPads.

[willtech]

Are you running the latest iOS/iPad OS on the devices ? We had this issue before with old iOS versions. Edited March 21, 2024 by willtech

[petben]

Thanks - yes iOS is ver 17.4 - as far as it will update.

 

The one thing we have managed to work out from this is that if we go into Apple School manager / Access Management/ Apple services, and toggle the option 'Allow managed Apple ID on...' to 'Any device' then it works. If it's set as 'Supervised devices only' or 'Managed devices only' then you can't sign in with the school Apple ID.

 

The device is listed as supervised in Intune, it's like Apple doesnt know this. I have checked all the syncs and they all succeed. I have removed the device from Azure/Intune and unassigned/reassigned the device from Apple School Manager. Erase and get the same error.

 

 

any ideas?