MDM InTune - iPhone Enrollment fails

Federico Coppola 1,181 Reputation points
2021-09-23T20:27:48.02+00:00

Hi all,
Today I started to enroll company iPhone devices.
I tried but without success.

iPhone seller, in my case, could not enroll company mobiles to Apple DEP, I used Apple Configurator 2 on a MacBook to erase iPhone, upgrade IOS firmware, create profile and deploy this profile on iPhone mobile.
Apple Configurator profile deployed happened with success, in fact after a few moment I could see iPhone on Apple Business Manager web portal.
Sync between Apple cloud and Microsoft cloud worked fine and I finally found this iPhone on Endpoint Microsoft Portal.
The state of this iPhone is "Ready to enroll".

We created profiles on Microsoft Endpoint management console and applied them to mobile.

After that I tried to run Apple configuration wizard, but I get this error message: "Invalid profile"

How can I solve it?
Do you have any ideas?

Thanks so much
Federico

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,254 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,365 questions
0 comments
Accepted answer
  1. Federico Coppola 1,181 Reputation points
    2021-10-27T21:21:57.813+00:00

    Hi all,
    We found the issue. We solved changing this settings in Microsoft Office 365 tenant:

    Open portal.azure.com > Itune node > Device Enrollment.
    Here let's select "Intune MDM Authority".

    In my case, MDM Authority was "Microsoft 365".

    After this change, iPhone downloaded profile without issues.

    I hope that this solution can help other IT technician.

    Regards

    0 comments

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Lu Dai-MSFT 28,356 Reputation points
    2021-09-24T02:41:49.647+00:00

    @Federico Coppola Thanks for posting in our Q&A.

    For this issue, we appreciate your help to collect some information:

    1. Please make sure that the iOS is allowed for all users in Devices > Enroll devices > Enrollment restrictions in intune portal.
    2. Please check if there is any detailed fails message in Devices > Monitor > Enrollment failures.

    If there is anything update, feel free to let us know.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  2. Federico Coppola 1,181 Reputation points
    2021-09-24T07:14:11.863+00:00

    Dear @Lu Dai-MSFT ,

    Please make sure that the iOS is allowed for all users in Devices > Enroll devices > Enrollment restrictions in intune portal.

    In my opinion it is fine. You can see pictures below:

    134963-image.png
    134809-intune-allusers.png

    Devices > Monitor > Enrollment failures

    There are not any enrollment failures about this iPhone

    I added in profile generated by Apple Configurator 2 the MDM URL from Microsoft Intune.

    Yesterday I tried to follow this guide: https://vmlabblog.com/2020/09/add-devices-in-apple-business-manager-with-intune/

    Could I get invalid profile error if there is an error about MS License for InTune (mobility + security e3)?

    Thanks for your help!
    Federico

  3. Federico Coppola 1,181 Reputation points
    2021-09-24T15:22:51.927+00:00

    Dear @Lu Dai-MSFT ,

    From the first picture you provided, the device limit number is 5. So, did you use the same user to enroll more than 5 devices? If yes, it will also make the enrollment >failed. It is suggested to increase the number and then test again.

    I don't think, in my opinion.

    Ok about license, thanks

    Thanks for your suggestions :)