Can't register new personal apple IDs on @ourschool.com

[howartp]

Hello.

 

For the last two days we've been unable to register new staff/student personal Apple IDs using @ourschool.com - they just throw an error.

 

We've been on the phone to Apple for 2 hours - apparently when we registered @ourschool.com with school.apple.com last year (quite possibly 365 days ago) it should immediately have stopped us registering personal Apple IDs against @ourschool.com but it didn't.

 

Our new intake last summer are on Managed AppleIDs, and each new intake will be moved on to managed IDs, but all staff and students in upper years are all on personal IDs with full app store access.

 

Has anyone else hit this issue and been able to overcome it? We're not set-up or ready for managed IDs for staff or upper school yet so we really need to get it fixed if it's possible?

 

Any ideas?

 

Peter

[DGardiner]

have you enabled federation? i think that stops new registrations

[howartp]

We started syncing users from Salamander/SFTP 6-9 months ago; prior to that we did a manual SFTP upload.

 

Nothing changed this week.

[RLR]

Have you created a lot of new Personal Apple ID's in the last few days? Apple usually limit domains that are creating lots of Apple ID's in a short space of time and you have to contact them to remove this limit (this was how it was a few years ago for us before we moved to managed apple ids).

[Brimstone]

Hello.

 

For the last two days we've been unable to register new staff/student personal Apple IDs using @ourschool.com - they just throw an error.

 

We've been on the phone to Apple for 2 hours - apparently when we registered @ourschool.com with school.apple.com last year (quite possibly 365 days ago) it should immediately have stopped us registering personal Apple IDs against @ourschool.com but it didn't.

 

Our new intake last summer are on Managed AppleIDs, and each new intake will be moved on to managed IDs, but all staff and students in upper years are all on personal IDs with full app store access.

 

Has anyone else hit this issue and been able to overcome it? We're not set-up or ready for managed IDs for staff or upper school yet so we really need to get it fixed if it's possible?

 

Any ideas?

 

Peter

Point 1. Unless you have registered and federated your ASM account against either your Azure/Entra or Google domain users are free to use any domain for personal Apple ID’s. Apple have only recently with updates stopped users from using the school domain.

 

Point 2. If you are not federated it is considered best practice to use schoolname.appleid.com for managed Apple ID’s so they can be identified easier.

 

Point 3. Users should not be using a school domain for personal Apple ID’s, this is likely reason you are now locked out as Apple consider this as suspicious activity. As previously said you used to be able to whitelist school domain when personal Apple ID’s were required but Apple no longer allow this.

 

Point 4. If you are already using Managed Apple ID’s it’s so simple to roll these out to every staff and student at the same time, so I’ve no idea why you are not doing this as a sync using Salamander will bring every user across and create a Managed Apple ID for them?

 

You will be stuck if you don’t move forward with Managed Apple ID’s for everybody.

Edited July 5, 2024 by Brimstone

[howartp]

Point 1. Unless you have registered and federated your ASM account against either your Azure/Entra or Google domain users are free to use any domain for personal Apple ID’s. Apple have only recently with updates stopped users from using the school domain.

 

Point 2. If you are not federated it is considered best practice to use schoolname.appleid.com for managed Apple ID’s so they can be identified easier.

 

Point 3. Users should not be using a school domain for personal Apple ID’s, this is likely reason you are now locked out as Apple consider this as suspicious activity. As previously said you used to be able to whitelist school domain when personal Apple ID’s were required but Apple no longer allow this.

 

Point 4. If you are already using Managed Apple ID’s it’s so simple to roll these out to every staff and student at the same time, so I’ve no idea why you are not doing this as a sync using Salamander will bring every user across and create a Managed Apple ID for them?

We have 2000 users.

 

The vast majority of them have had personal Apple IDs since before managed apple IDs existed and certainly before we moved to using managed IDs last year.

 

You have no idea why we wouldn't want to suddenly remove the App Store and any paid app purchases from our staff and students who have been able to use their iPads perfectly normally for the last 11 years?

 

It's taken a lot of SLT conversation and pastoral work to decide and then communicate to staff and to year 7 parents that when the new intake join the school, they will be locked down with no app store, particularly when older siblings still have the app store.

[Brimstone]

We have 2000 users.

You have no idea why we wouldn't want to suddenly remove the App Store and any paid app purchases from our staff and students who have been able to use their iPads perfectly normally for the last 11 years?

 

 

Sorry but where did I say moving users to a Managed Apple ID would remove access to the App Store and paid personal purchases for them?

 

With an iPad signed into a Managed Apple ID users can still log into the App Store (If given access to it via MDM) with their personal Apple ID and buy apps to their heart's content.

 

Just like I do everyday on my MDM managed and Supervised iPad Pro?

[howartp]

If you saying the AppStore can be made available on devices signed into managed IDs then a) I apologise and b) I might just love you?

 

We spent ages 18 months ago reading about this and found no evidence of it nor suggestions it could be done?

[DGardiner]

If you saying the AppStore can be made available on devices signed into managed IDs then a) I apologise and b) I might just love you?

 

We spent ages 18 months ago reading about this and found no evidence of it nor suggestions it could be done?

 

iirc the managed apple id can not, but theres nothing stopping them logging in with their personal account to make use of the app store as long as you dont block it.

[Brimstone]

If you saying the AppStore can be made available on devices signed into managed IDs then a) I apologise and b) I might just love you?

 

We spent ages 18 months ago reading about this and found no evidence of it nor suggestions it could be done?

So if a user is signed into an iPad with a Managed Apple Account (they are called these now, no idea why) then as long as you grant them access to the App Store, Music Store, Book Store and others all they have to do is open the App Store app and tap on the profile icon on the right of the screen to then sign in with their Personal Apple ID.

 

I have 2 x Personal and Managed Apple iD's signed into both my work iPhone and iPad and MacBook Pro.