Apple ADE verification overview

Overview

Firstbase provides a service to continually monitor whether your Apple devices are assigned to your Apple Business organization (formerly Apple Business Manager/ABM) for Automated Device Enrollment (ADE). After a one-time setup, Firstbase connects to your Apple Business account using API credentials you provide, automatically checks assignment status for Apple devices in your Firstbase inventory, and keeps that status up to date.

You configure the integration directly in the Firstbase platform under API & Integrations > Integrations. No separate dashboard is required. Assignment status is visible in your inventory. When assignment issues need attention, Firstbase Support or your Customer Success team can help with remediation.

Please see the full setup guide for more details

What Does This Service Cover?

• Automated assignment verification: Firstbase checks whether Apple devices in your inventory are assigned to your Apple Business organization.
• Initial sync on setup: When you first connect your API credentials, Firstbase runs a full sync of devices registered in your Apple Business organization.
• Ongoing updates: Assignment status is refreshed when new Apple devices are added to your inventory, and through a scheduled nightly sync across your fleet.
• Read-only access (when configured correctly): When you create the API role and account per the Setup Guide, Firstbase uses those credentials to query assignment status only. It cannot add, remove, or modify devices in your Apple Business organization.
• Remediation support: If a device is unassigned, your team or Firstbase Support can work with you on next steps based on how the device was procured.

Benefits

• Fewer deployment surprises: Assignment issues are surfaced before a device reaches an employee, not after.
• Self-serve setup: Your Apple Business Administrator can connect API credentials directly in the Firstbase platform without waiting for manual onboarding.
• Zero-touch readiness: Devices that are unassigned in Apple Business cannot be zero-touch deployed to end users via MDM using ADE (Automated Device Enrollment, formerly DEP). Assignment verification helps keep your fleet ready.
• Less manual work: Your IT team does not need to manually cross-check inventory against Apple Business. Firstbase handles ongoing verification automatically.

How It Works

Setup is a one-time configuration. Your Apple Business Administrator creates a least-privilege API role and account in Apple Business, then submits the credentials in Firstbase. After that, verification runs automatically.

1. One-time setup: Create a least-privilege API role and API account in Apple Business, then submit your Key ID, Client ID, and private key (.pem file) in the Firstbase platform under API & Integrations > Integrations, in the Device Management section. See the ABM Verification Setup Guide for full step-by-step instructions.
2. Initial full sync: When credentials are saved, Firstbase immediately syncs all devices in your Apple Business organization and records whether each device is currently assigned.
3. Ongoing checks: Assignment status stays current in three ways: (1) event-driven checks when a new Apple device is added to your Firstbase inventory or an existing serial number is updated; (2) a nightly sync at 02:00 UTC that re-verifies all devices for organizations with connected credentials; and (3) a fresh full sync whenever you submit updated credentials.
4. How assignment is determined: Firstbase queries Apple's device API using your serial number. A device is Assigned if it is assigned to your Apple Business organization and has not been released. A device is Unassigned if it is missing from your Apple Business organization or has been released from it.
5. Getting help: If verification surfaces a gap, contact Firstbase Support or your Customer Success Manager. Firstbase can advise on remediation steps. Firstbase does not modify your Apple Business organization on your behalf.

Understanding Assignment Status

Every Apple device in your Firstbase inventory with a serial number can have one of two assignment statuses in Apple Business:

Assigned

The device is assigned to your Apple Business organization and has not been released. The device is ready for Automated Device Enrollment (ADE) through your MDM. No action needed.

Unassigned

The device is either not assigned to your Apple Business organization, or it was previously assigned but has since been released.

If you recently added a device to Apple Business, it may take up to 2-3 business days to appear as Assigned after the next sync.

What to do when a device is Unassigned depends on how it was procured:

• Firstbase-supplied devices: Contact Firstbase Support. Firstbase Operations can investigate whether the device was assigned to your Apple Business account at purchase.
• Customer-supplied devices: Your IT team may need to assign the device through your Apple reseller relationship, Apple Configurator, or another ADE method.

Note: A device can be Assigned in Apple Business (ready for ADE) but not yet enrolled in your MDM. This service checks Apple Business assignment, not MDM enrollment. Firstbase matches devices by serial number. Ensure serial numbers in your Firstbase inventory are accurate and complete. Formatting differences (extra spaces, incorrect characters) can prevent a successful match.

Availability, Limitations & Important Notes

• Apple Business only: This service currently supports Apple Business (formerly Apple Business Manager/ABM). Apple School Manager (ASM) is not yet supported.
• API credentials required: An Apple Business API account with the required role must be created by your Apple Business Organization Administrator before verification can run.
• Self-serve configuration: Credentials are submitted in the Firstbase platform under API & Integrations > Integrations. Existing credentials are masked after submission. Leave a field empty when updating to keep the current value.
• Supported devices: Mac, iPhone, iPad, and Apple TV devices managed through Firstbase with a serial number.
• Read-only access (when configured correctly): When you create the API role and account per the Setup Guide, Firstbase can only read assignment status from Apple Business. The service cannot add, remove, or modify any devices in your Apple Business organization.
• Sync timing: Assignment status syncs automatically, including a nightly full sync at 02:00 UTC. Newly added devices may take up to 2-3 business days to appear as Assigned.
• Single Apple Business organization: Verification supports one Apple Business organization per Firstbase organization. If your organization uses multiple ABM/DEP numbers, please contact your CSM before proceeding.
• Feature availability: The Apple Business API integration is being rolled out to customers. If you do not see it in your Integrations hub, contact your CSM.
• All services are subject to the Firstbase Global Equipment & Logistics Service Capabilities

Need Further Assistance?

For questions about ADE verification or help interpreting assignment status, please contact your Customer Success Manager (CSM) or reach out via your normal Firstbase support channel.

For the full step-by-step setup instructions, see the ABM Verification Setup Guide.