Enroll Apple Vision Pro with Apple Business and Jamf

Set up Automated Device Enrollment, pair Apple Business with Jamf Pro, and start pushing apps and configurations to Apple Vision Pro.

This is the MDM infrastructure setup you need before you can use Deploy Innoactive Spatial via MDM — getting your Apple Vision Pro fleet enrolled in MDM in the first place, with Apple Business and Jamf Pro paired so apps and configurations can flow from one to the other.

If your IT team already has Apple Business and Jamf Pro running for iPhone or iPad fleets, most of this will look familiar — the visionOS bits and the gotchas we have hit in the field are the parts worth reading carefully.

If you still see references to Apple Business Manager in Apple's URLs (like the support guide linked below) or in third-party documentation, that is the same product — Apple recently combined Apple Business Manager, Apple Business Essentials, and Apple Business Connect under the unified Apple Business name.

What you will end up with

  • Apple Vision Pro devices enrolled in MDM automatically the first time they are powered on (Automated Device Enrollment).
  • A pairing between Apple Business and Jamf Pro so apps assigned in Apple Business can be deployed by Jamf.
  • A working channel for delivering the Innoactive Spatial enterprise configuration through Jamf as a Managed App Configuration (.plist) — the official distribution path.

1. Apple Business — turn on Automated Device Enrollment for visionOS

Automated Device Enrollment (ADE, formerly DEP) is what makes a brand-new Vision Pro enroll into your MDM as soon as it connects to the internet, with no per-device manual setup.

  1. Sign in to Apple Business as an administrator.
  2. Make sure your Vision Pro devices were purchased on a reseller or Apple Customer Number linked to your Apple Business organization — they appear automatically under Devices when the link exists.
  3. Assign those devices to your Jamf MDM server under Devices → MDM Server Assignment.

Gotcha — enable Apple Business's beta / preview features. Vision Pro support for ADE has historically been gated behind Apple Business's Preview features / beta opt-in. Before you try to assign devices, open the administrator account settings in Apple Business and enable the relevant preview feature for Apple Vision Pro — otherwise the visionOS device class will not show up as a target for your MDM server assignment.

Reference: Apple — Intro to Automated Device Enrollment.

2. Pair Apple Business with Jamf Pro

Pairing means Jamf can act on behalf of your Apple Business organization to distribute apps assigned in Apple Business and apply configurations to enrolled devices. The mechanism is the Volume Purchasing token (.vpptoken).

Download the VPP token from Apple Business

  1. In Apple Business, go to Apps and Books (or Locations, depending on where your apps live).
  2. Open the Location whose token you want to use, and download the .vpptoken file from its settings panel.

Gotcha — you may need to create a second Location. A .vpptoken can only be bound to one MDM. If the token for your primary Location is already in use by a different MDM, or has been previously bound and ended up in a half-broken state, the cleanest path is to create a new Location in Apple Business (effectively a second organizational unit), purchase the visionOS apps under that Location, and download its fresh .vpptoken. Your existing iOS / iPadOS Locations stay untouched.

Upload the VPP token in Jamf Pro

  1. In Jamf Pro, go to Settings → Global → Volume Purchasing.
  2. Click + New, give it a clear name (e.g. Vision Pro VPP), and upload the .vpptoken file you just downloaded from Apple Business.
  3. Save. Jamf will pull the list of apps and seats associated with that token within a few minutes.

Reference: Jamf — Integrating with Volume Purchasing.

3. Enroll a Vision Pro device

With ADE configured in Apple Business and the VPP token uploaded in Jamf, a brand-new Vision Pro will enroll automatically the first time it is set up.

  1. Power on the device.
  2. Connect to Wi-Fi.
  3. Walk through the standard visionOS setup screens (hand and eye calibration, Apple ID prompts).

Gotcha — do not skip the standard visionOS setup. Even though the device is being enrolled in the background, you (or the end user) still need to walk through the regular visionOS configuration screens. The MDM enrollment prompt and the Remote Management confirmation appear during this flow, and they must be accepted when they show up. Restoring the device or skipping screens during setup can leave it in a half-enrolled state where Jamf does not push the configuration profile and you end up troubleshooting why apps will not install.

To verify, check Settings → General → VPN & Device Management on the headset — your organization's MDM profile should be listed. In Jamf Pro, the device appears under Devices → Search Inventory.

4. Distribute apps via Jamf

Once Apple Business and Jamf are paired:

  1. In Apple Business, assign Innoactive Spatial (or whichever app) to the Location whose token Jamf is using.
  2. In Jamf Pro, go to Devices → Mobile Device Apps → + New, search for the app, and pick it from the App Store list — it appears because Jamf can see the apps under the paired token.
  3. Set the distribution method to Install Automatically so the app is pushed without user interaction.
  4. Scope the app to the relevant Vision Pro device group.

The app installs on the next MDM check-in. Because Jamf installed it, it is a managed app — which is the prerequisite for the next step.

5. Distribute managed configurations (.plist)

For app-specific settings (the Innoactive Spatial license, the Portal backend list, the default environment, etc.) Jamf delivers a .plist that visionOS hands to the app on launch.

  1. In Jamf Pro, go to Devices → Mobile device apps → <your app> → App configuration.
  2. Paste the .plist contents into the Preferences text area (must be a bare <dict>...</dict> body — no surrounding <plist> wrapper).
  3. Save and let the device check in.

Managed app config is only delivered to apps that were installed as managed apps in step 4. Apps that a user installed themselves from the App Store will not receive the configuration even if the same .plist is configured for them.

For Innoactive Spatial specifically — including how to get the .plist artifact pre-built — see Deploy Innoactive Spatial via MDM.

Reference: Jamf — Managed App Configuration.

Gotchas recap

The three things most likely to trip you up the first time:

  • Enable Apple Business's beta / preview features so visionOS appears as a target for Automated Device Enrollment.
  • Do not skip the standard visionOS setup on a newly-enrolled device — the MDM enrollment confirmation appears mid-flow and must be accepted, otherwise the device ends up half-enrolled.
  • Create a second Location in Apple Business if your existing .vpptoken is already bound to another MDM. Trying to reuse a token across MDMs produces confusing half-broken states; a fresh Location and a fresh token is the cleanest path.