iPad - Managed Apple IDs asking for Passcode

[StephenPink]

Hi guys,

 

Weird one - have noticed on new iPads being set up, that when signing into the Managed Apple ID (federated to Azure), students are now being prompted to enter their iPad passcode. Assume this is to do with Keychain in iCloud changes? Think I remember reading something about it but can't find it now...

 

Anyway the problems we're having are that;

- the passcode is sometimes not the current iPad passcode, but a previous one

- even after entering a correct, accepted passcode, the user doesn't get signed in to their Apple ID, it returns to the standard "Sign in" message

 

 

Anyone got any ideas/seeing this as well? All devices supervised and managed via Jamf School as well in case that makes a difference.

 

Cheers,

Stephen

[Brimstone]

Are these shared iPads, as in Apple's Shared iPad config?

[StephenPink]

Nope sorry, these are 1:1 enrolled devices

[TopKeeper]

Are your users setup in Apple School manager at all? The users may have a security permission in there to create a specific sized passcode.

 

The passcode is also saved to there icloud account through ASM so if they created the passcode on another iPad a year ago say it could be this. You can also reset them in ASM.

[StephenPink]

Are your users setup in Apple School manager at all? The users may have a security permission in there to create a specific sized passcode.

 

The passcode is also saved to there icloud account through ASM so if they created the passcode on another iPad a year ago say it could be this. You can also reset them in ASM.

 

Yes however they are federated to Azure so in terms of Apple ID password they don't have one. The "Shared iPad" passcode only comes into play when signing into a shared iPad - if they have never done this, then they will have never needed to create a passcode.

 

Whilst we can reset them in ASM, this is an additional step which when doing the Year 7 handout of ~300 will cause a significant issue.

[Tefters]

Yup, this has come about in the last 4 to 6 weeks and is causing us headaches also.

 

1:1 iPads - Student breaks iPad and we give a replacement, old iPad was de-assigned in JamF, erased and trashed.

 

Student signs into new iPad (OOBE) and asks for passcode after entering Apple ID, it's a previous passcode not always the last one.

 

We end up skipping this and they are not properly signed into iCloud.

 

Have checked iCloud on the web, AppleID on the web, ASM and can find nothing in regards to previous devices or MFA.

There is one reset option in ASM (can't remember name of top of my head) but it doesn't work.

 

I need to contact Apple for further assistance as something is not right here l. Luckily only 3 affected users so far so not everyone and for now 2 are running with no iCloud services, 1 remembered the old passcode and managed to get into their services. We then had this 1 user set their new passcode and tried a test with another iPad and same thing again but this time with the new passcode so the issue will continue to follow through devices.

 

At first I thought it was to do with IOS 18 but my colleague reckons he has seen it before a few weeks ago.

Maybe it's something to do with the new Password manager behind the scenes that has either replaced or works alongside keychain?

 

I don't follow Apple enough to keep up with all the little details but there is defininately something afoot in managed school accounts as no school would want the previous passcode setup either on a 1:1 or shared device setup.

Edited September 26, 2024 by Tefters

[StephenPink]

Yup, this has come about in the last 4 to 6 weeks and is causing us headaches also.

 

1:1 iPads - Student breaks iPad and we give a replacement, old iPad was de-assigned in JamF, erased and trashed.

 

Student signs into new iPad (OOBE) and asks for passcode after entering Apple ID, it's a previous passcode not always the last one.

 

We end up skipping this and they are not properly signed into iCloud.

 

Have checked iCloud on the web, AppleID on the web, ASM and can find nothing in regards to previous devices or MFA.

There is one reset option in ASM (can't remember name of top of my head) but it doesn't work.

 

I need to contact Apple for further assistance as something is not right here l. Luckily only 3 affected users so far so not everyone and for now 2 are running with no iCloud services, 1 remembered the old passcode and managed to get into their services. We then had this 1 user set their new passcode and tried a test with another iPad and same thing again but this time with the new passcode so the issue will continue to follow through devices.

 

At first I thought it was to do with IOS 18 but my colleague reckons he has seen it before a few weeks ago.

Maybe it's something to do with the new Password manager behind the scenes that has either replaced or works alongside keychain?

 

I don't follow Apple enough to keep up with all the little details but there is defininately something afoot in managed school accounts as no school would want the previous passcode setup either on a 1:1 or shared device setup.

 

 

Ahhh yay! I mean, not yay (feel your pain) but glad it isn't something specific to me/my Trust.

 

I don't recall seeing it prior to iOS 18 but could be wrong. It seemed to around the time the changes were made to the Apple ID sign in experience - the visuals are different and so is wording.

 

Please do let me know how you get on with Apple!

 

Thanks

[Tefters]

I have raised a support ticket with Apple regarding this as I have managed to do some further testing.

 

It would appear that old iPads are being remembered in students iCloud accounts along with some encrypted safari data!?!

 

If you skip the previous passcode option on the OOBE to get the new iPad setup and then go to iCloud in settings and try re-sync when asked for the previous passcode again you can choose a "more information" button and it will tell you why, in the cases I am finding it's due to a few KB worth of encrypted safari data (F know why...). You then get a further option to wipe all the iCloud data and start again from fresh, choose this and all good but obviously if they have photos and other stuff in iCloud poof it's deleted too.

 

I still don't think this is right so will see if I get anywhere with Apple Business Technical Support.

[Tefters]

Well spank my ass and call me Charlie, look what i accidentally stumbled across this afternoon:

 

If some iCloud Data isn’t syncing when a student sets up a new device – Apple Support (UK)

 

This is our issue and the workaround is what I worked out yesterday so that is the only solution.

Looking at the published date it was only published recently too...

 

Ho hum, problem solved i guess.

Edited October 9, 2024 by Tefters

[StephenPink]

Well spank my ass and call me Charlie, look what i accidentally stumbled across this afternoon:

 

If some iCloud Data isn’t syncing when a student sets up a new device – Apple Support (UK)

 

This is our issue and the workaround is what I worked out yesterday so that is the only solution.

Looking at the published date it was only published recently too...

 

Ho hum, problem solved i guess.

Good find, thank you! Will see if that helps the team...

[techtech]

Any update on this, we're trying to enrol ipads on intune, but whenever we try login with someones account, it asks for a passcode rather than their password. We didn't set up passcode nor would we even know what the passcode is as these accounts have never been used to login to an ipad and the ipads themselves are brand new.

 

Thanks