ABM and TestFlight

From Termatrac
Revision as of 03:31, 19 December 2025 by Wikiadmin (talk | contribs) (✅ Before starting (IT prerequisites))
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

As of December 2025, the iTraker app on Apple App Store is an very old version supporting only iTraker Base, released in March 2024. The latest versions of the app support the thermal camera, however, available only on Apple TestFlight. If your company has "Apple Business Manager" (ABM) to manage iOS devices, there are some steps required for installing the app from TestFlight while keeping the security and integrity of ABM.

To enable TestFlight or App Store distribution without personal Apple IDs, you’ll need to create Managed Apple IDs in Apple Business Manager. These are enterprise‑controlled accounts that integrate with JAMF Now. You can set them up by verifying your domain in ABM, creating accounts manually or syncing with Azure AD/Google Workspace (both optional), and then assigning them to your devices. This way, your users can install our app securely while you maintain full IT control.

Managed Apple IDs are created and controlled through ABM, and they’re the right solution for TestFlight or App Store distribution in a managed environment.

Steps for the Enterprise Customer (IT admin)

  1. Sign in to Apple Business Manager
    • Go to business.apple.com and log in with the organization’s ABM administrator account.
  2. Set up domains (if not already done)
    • In ABM, add and verify the company’s domain (e.g., company.com).
    • This ensures Managed Apple IDs are created under that domain (e.g., j.smith@company.com).
  3. Create Managed Apple IDs
    • Navigate to AccountsAdd Accounts.
    • Choose how to create IDs:
      • Automatically: Sync with Microsoft Azure AD or Google Workspace.
      • Manually: Enter user details (first name, last name, email).
    • ABM generates the Managed Apple ID in the format you choose (e.g., firstname.lastname@company.com).
  4. Assign roles
    • Each Managed Apple ID can be given a role (e.g., User, Manager, Administrator).
    • For app testing, a User role is usually sufficient.
  5. Distribute login details
    • ABM provides credentials for each Managed Apple ID.
    • IT can send these to employees securely, or integrate with their identity provider for single sign‑on.
  6. Enforce policies via JAMF Now
    • JAMF Now can enforce restrictions (disable App Store purchases, control iCloud services, enforce app whitelisting).
    • This ensures Managed Apple IDs are used only for approved purposes like TestFlight.

Key Points to Emphasize to the Customer

  • Security: Managed Apple IDs are controlled by IT, unlike personal Apple IDs.
  • Compliance: They can restrict services (no iMessage, no FaceTime, no personal App Store purchases).
  • Scalability: IDs can be created in bulk or synced with existing identity systems.
  • Integration: Works seamlessly with JAMF Now for device/app management.
managed apple id

Steps for Enterprise Users to Get the iTraker App via TestFlight

Before starting (IT prerequisites)

  • Device must be enrolled in JAMF Now and assigned a Managed Apple ID via Apple Business Manager.
  • TestFlight app must be allowed and installed via JAMF Now or App Store.
  • The user must browse the TestFlight public beta link:
https://testflight.apple.com/join/5cGea2II

.or scan QR code:

QR code for iTraker app

User Steps

  1. Sign in with Managed Apple ID
    • On the iPhone, go to Settings → Apple ID and sign in using the Managed Apple ID provided by IT.
    • This enables access to Apple services like TestFlight.
  2. Install TestFlight
    • Open the App Store (if enabled) and search for TestFlight.
    • Tap Install.
    • Alternatively, IT can push TestFlight via JAMF Now.
  3. Open the TestFlight invitation link
    • Tap the TestFlight public beta link.
    • It will open in Safari and redirect to the TestFlight app.
  4. Accept the invitation
    • In TestFlight, tap Accept to join the beta program for the iTraker app.
  5. Install the iTraker app
    • Tap Install inside TestFlight.
    • The app will appear on the home screen like any other app.
  6. Enable notifications (optional)
    • TestFlight may prompt to allow notifications for beta updates.
    • This helps users stay informed about new builds or feedback requests.

Update flow

  • When you release a new build, users will get a TestFlight notification.
  • They can open TestFlight and tap Update to install the latest version.

Security tips for IT

  • Restrict App Store access to only allow TestFlight.
  • Whitelist the iTraker app in JAMF Now.
  • Monitor device compliance and app installation status via JAMF’s dashboard.

Why is Managed Apple ID significant now

Key points

  1. Managed Apple IDs are not always required for app deployment
    • With ABM + JAMF Now, apps purchased via the Volume Purchase Program (VPP) can be assigned directly to devices.
    • In this case, no Apple ID (managed or personal) is needed on the device — JAMF pushes the app silently.
  2. Managed Apple IDs are required for certain Apple services
    • If users need access to iCloud Drive, Notes, Calendar, or TestFlight, they must sign in with a Managed Apple ID.
    • TestFlight specifically requires an Apple ID (personal or managed) to accept invitations and install beta builds.
  3. Normal Apple IDs are not recommended in enterprise environments
    • Personal Apple IDs bypass IT control and introduce compliance/security risks.
    • ABM is designed to replace personal Apple IDs with Managed Apple IDs for enterprise governance.

Remarks:

  • TestFlight supports for Managed Apple ID since 2025.
  • While using a personal Apple ID to install the app from TestFlight then removing the ID could be working as a workaround, however, when the app is updated in TestFlight, you will have to do all respective workaround steps again. Therefore, it could be more convenient to just used Managed Apple ID which could be good for using other built-in apps of iOS.