From 4934b3ff0046b5083c081b5bb75eb217b86bdefc Mon Sep 17 00:00:00 2001 From: Steven Palmesano <3100993+spalmesano0@users.noreply.github.com> Date: Fri, 13 Feb 2026 07:54:55 -0600 Subject: [PATCH] MDM migration guide updates (#38240) - Clarify how often Fleet will prompt for enrollment. - Warn that that Safari may be needed. --------- Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com> --- articles/mdm-migration.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/articles/mdm-migration.md b/articles/mdm-migration.md index df38fca352..6f1a17d81c 100644 --- a/articles/mdm-migration.md +++ b/articles/mdm-migration.md @@ -10,6 +10,8 @@ This guide provides instructions for migrating devices from your current MDM sol - Fleet is connected to Apple Push Notification service (APNs) and Apple Business Manager (ABM). [See macOS MDM setup](https://fleetdm.com/guides/macos-mdm-setup) - For the end-user workflow: A service is required that can receive a webhook to send an unenroll request to the existing MDM server. See [this example](https://victoronsoftware.com/posts/webhook-flow-with-tines/) using Fleet webhooks with Tines. +> **Important:** Apple MDM enrollment relies on a Safari-based system web view. If Safari is blocked or restricted, enrollment can fail. + ## Migrate hosts To migrate hosts, we will do the following steps: @@ -41,7 +43,9 @@ The end user migration workflow allows the user to kick off migration by unenrol End user experience: -- After a host is unenrolled from your current MDM solution, eventually (within two hours) the end user will be prompted with Apple's **Remote Management** full-screen popup if the host is assigned to Fleet in ABM. +- After a host is unenrolled from your current MDM solution, the end user is prompted with Apple’s Remote Management full-screen pop-up, typically within two hours, if the host is assigned to Fleet in ABM. + +> **Note:** After Fleet begins prompting end users to enroll, it will continue to prompt them every few minutes. macOS Remote Management popup - If the host is not assigned to Fleet in ABM (manual enrollment), the end user will be given the option to download the MDM enrollment profile on their **My device page**. Fleet icon in menu bar @@ -65,6 +69,8 @@ End user experience: - To watch an animation of the end user experience during the migration workflow, head to **Settings > Integrations > MDM** in the Fleet UI, and scroll down to the **End user migration workflow** section. +> **Note:** After Fleet begins prompting end users to enroll, it will continue to prompt them every few minutes. + Configuration: - In Fleet, you can configure the end user workflow using the Fleet UI, Fleet API, or Fleet's GitOps workflow.