This article presents the different activation modes for Apple devices, ranging from the more comprehensive Supervised Mode to the simpler Basic Mode.
Benefits
Understanding these methods will help you to:
Choose which activation method best suits your needs.
Understand the level of control each method offers.
Know the possibilities and limitations of each type of enrollment.
General Prerequisite
For all activation methods, the APNs (Apple Push Notification service) Certificate must have been previously configured in Pulsus.
See how in: Preparing the environment for iOS
There are four main methods to enroll iOS devices in Pulsus, each with a different level of control and process.
1. Supervised Mode (ADE + ABM)
This is the most robust automated enrollment method, ideal for corporate devices purchased through Apple-authorized resellers.
Control: Advanced (Supervised Mode).
How it works: Devices are added to Apple Business Manager (ABM)—Apple's platform for managing corporate devices—directly by the reseller.
Enrollment: The process is automated (via ADE - Automated Device Enrollment). If the device is already synced with the MDM server (Pulsus) in the ABM portal, simply turn it on. Otherwise, a Factory Reset will cause the device to automatically enroll in the MDM.
MDM Removal: The user CANNOT remove device management, even if they restore the device to its factory settings.
2. Supervised Mode (Apple Configurator + ABM)
This method is the alternative for adding devices to ABM that were not purchased from an authorized reseller (e.g., used or standard retail devices).
Control: Advanced (Supervised Mode).
How it works: The process is manual, using the Apple Configurator tool (installed on a macOS computer or another iPhone) to add the device to the company's ABM.
Enrollment: Requires a Factory Reset of the device during the process.
MDM Removal: The user CAN remove management within the first 30 days after activation. After this period, the MDM can only be removed through the ABM portal.
3. Supervised Mode (Apple Configurator)
This method is an alternative for companies that, for whatever reason, do not have an Apple Business Manager (ABM) account.
Control: Advanced (Supervised Mode).
How it works: The process requires a Factory Reset while the device is connected (via cable or proximity) to Apple Configurator to activate supervision, but the device is not linked to ABM.
Enrollment: After the device is supervised, enrollment in Pulsus (MDM) must be done manually by the user (e.g., by accessing an enrollment link or downloading the app).
MDM Removal: The user CAN remove the management profile (MDM) at any time.
Note: Even if the user removes the MDM profile, the device remains in a "Supervised" state until a new Factory Reset is performed.
4. Basic Mode (Safari Browser / BYOD)
This is the simplest activation method. It is commonly used for corporate devices that require a lower degree of management.
Control: Basic (Unsupervised).
How it works: A Factory Reset is not required. Activation is voluntary.
Enrollment: The user can manually enroll in two ways:
Accessing the enrollment link through the Safari browser (e.g., http://apple.pulsus.mobi/).
Downloading the Pulsus app from the App Store.
MDM Removal: The user CAN remove the management profile (MDM) at any time.
Limitations: This mode has limited functionality. The complete list of restrictions can be seen in the article: iOS Restrictions and Features.
Important Notes
Location Collection: In both Basic Mode and manual Supervised methods (via Apple Configurator), enrollment can be done via a link in the browser or via the Pulsus app. However, for the MDM to collect the device's location, using the Pulsus app is mandatory.
Level of Control: The main difference between the modes is the level of control. Supervised Mode (especially via ABM) is the only way to ensure that the MDM will not be removed by the user and to have access to all management features.