NetNXT Logo

SOP: Automated macOS Device Enrollment via JumpCloud MDM (ADE + ABM + ZTE)

November 12, 2025
3 min read
ByNetNXT

Purpose

This SOP provides detailed steps to automate macOS device onboarding using JumpCloud MDM, leveraging Automated Device Enrollment (ADE), Apple Business Manager (ABM), and Zero Touch Enrollment (ZTE).

It also explains how to integrate non-ABM devices using Apple Configurator and configure automated software deployment for newly enrolled devices.

Automated Device Enrollment Setup (ZTE Group)

Step 1 — Create a Device Group in JumpCloud

  1. Log in to the JumpCloud Admin Portal.
  2. Navigate to Devices → Device Groups → + Add Group.
  3. Assign a clear and descriptive name (e.g., ZTE Mac Group).
  4. This group will manage all macOS devices enrolled through Zero Touch Enrollment.

Step 2 — Configure ADE in JumpCloud

  1. Navigate to MDM → ADE in the JumpCloud Admin Console.
  2. Select Configure macOS.
  3. Under Default Group Association, choose the group created in Step 1.
  4. Configure settings according to organizational policies, including:
  • Enabling Supervision Mode
  • Enforcing User Authentication
  • Skipping specific setup steps (such as Siri or Touch ID)
  1. Click Save to apply the configuration.

Application Deployment to Device Group

  1. Navigate to Software Management → Applications in JumpCloud.
  2. Add or upload required macOS applications.
  3. Associate the software with the ZTE Mac Group.
  4. Applications will install automatically once the device enrolls through ADE or ZTE.

Adding Non-ABM Mac Devices to ABM via Apple Configurator (iOS)

Prerequisites

  • A Mac running macOS 12 (Monterey) or later
  • The latest Apple Configurator app installed on iPhone or iPad
  • An Apple Business Manager (ABM) account with Admin or Device Enrollment Manager privileges
  • The target Mac must be erased and at the Hello screen

Procedure

  1. On the iPhone, open the Apple Configurator app.
  2. Log in using ABM admin credentials.
  3. Grant the necessary permissions:
  • Enable Camera and Bluetooth.
  1. In Configurator settings, navigate to MDM Server Assignment → Specific and select JumpCloud MDM.
  2. Restart the Configurator app.
  3. On the target Mac:
  • Ensure it is at the Hello screen.
  • Bring the iPhone close to the Mac.
  • A pairing code will appear; scan it with the iPhone.
  • Follow the setup process until prompted to restart the Mac.

After the restart, the Mac will automatically appear in Apple Business Manager (ABM).

Next:

  • Log in to the JumpCloud Admin Console → MDM.
  • Scroll down and click Sync With Apple.
  • Verify that the device’s serial number appears under managed devices.

Important: Always perform the Sync With Apple step after pairing. This ensures the device is properly associated for ZTE enrollment.

Zero Touch Enrollment (ZTE) Walkthrough

  1. Reset the macOS device to factory settings.
  2. At startup, wait for the Hello screen.
  3. Continue through setup until the Wi-Fi selection screen.
  4. Connect to a valid network.
  5. Wait for the Remote Management screen to appear.
  6. Acknowledge and continue to the JumpCloud Login Screen.
  7. Enter the user’s JumpCloud email and password.
  8. JumpCloud completes the enrollment automatically.
  9. The device now appears under the ZTE Mac Group in JumpCloud.

Additional Notes

  • Applications assigned to the ZTE device group will install automatically once the device completes enrollment.
  • Ensure devices remain connected to Wi-Fi throughout the process to avoid incomplete provisioning.
  • Regularly sync ABM and JumpCloud to maintain device visibility and management accuracy.

FAQs

1. What’s the difference between ADE and ZTE?

ADE is Apple’s official framework for automated device enrollment, while ZTE (Zero Touch Enrollment) is JumpCloud’s streamlined automation built on top of ADE, integrating MDM setup and user authentication without manual IT intervention.

2. Can I add existing Macs that weren’t purchased through ABM?

Yes. Non-ABM devices can be added using Apple Configurator on iPhone and then synced with JumpCloud through ABM.

3. My device isn’t visible in JumpCloud after syncing—what should I check?

Confirm that the device appears in ABM, verify the Sync With Apple step was completed, and ensure the device was restarted after pairing.

4. Can applications be installed automatically after enrollment?

Yes. Any applications linked to the ZTE Mac Group will deploy automatically once enrollment completes.

5. Do users require administrative rights during enrollment?

No. The setup process uses JumpCloud SSO for authentication. Admin rights can be configured later through policies if required.

Was this article helpful?