> For the complete documentation index, see [llms.txt](https://docs.harmony.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.harmony.io/integrations/mdm/apple-business-manager.md).
# Apple Business Manager
Apple Business Manager (now Apple Business) is Apple's platform for deploying and managing Apple devices at scale. It provides zero-touch enrollment, automated app distribution, and streamlined device management for organizations. Connecting Apple Business Manager to Harmony enables automated device provisioning and intelligent fleet management.
Harmony authenticates securely with Apple Business Manager using OAuth and automatically refreshes the connection in the background, so your data stays up to date without any manual intervention. ABM device data is enriched at query time rather than during sync, which means asset information remains accurate and consistent even as your fleet changes.
#### What the Apple Business Manager integration enables
| Capability | Description |
| ------------------------- | ------------------------------------------------------------------------- |
| MDM Integration | Coordinate with MDM solutions (Jamf, Kandji, Intune) |
| Purchase Tracking | Track device purchases and serial numbers |
| Warranty Tracking | Fetch real warranty end dates via AppleCare Coverage API |
| Released Device Detection | Automatically detect and update status when devices are released from ABM |
#### Prerequisites
* **Apple Business Manager Admin**: Organization Administrator role (only this role can create an API account)
* **API Credentials**: Private key and client ID from Apple Business Manager
* **Harmony Account**: Active Harmony workspace
#### Connect Apple Business Manager to Harmony
**Step 1: Generate API Credentials in Apple Business Manager**
1. Sign in to [business.apple.com](https://business.apple.com) as an Organization Administrator
2. Go to **Settings** > **API**
3. Select **Add API Account**, enter a name for the account, choose a role that has the **View device management services, manage default platform assignment, and add devices with Apple Configurator** permission (for example, Device Enrollment Manager), and select **Next**
4. Select **Generate & Download** to download the private key file (.pem). You can generate the key only once, so store the file securely
5. Select **Edit** next to the API account and copy the **Client ID** and **Key ID**
**Step 2: Navigate to Integrations**
1. Log in to your Harmony dashboard
2. Go to **Settings** > **Integrations**
3. Find **Apple Business Manager** under **MDM** (or search for it by name) and click its card
**Step 3: Configure Connection**
If an Apple Business Manager instance is already connected, click **+ Create instance** first.
1. Enter an **Instance name** for your Apple Business Manager connection (required)
2. Enter your **Key ID** (Apple Private Key ID)
3. Enter your **Client ID** (Apple Business Manager Client ID)
4. Upload your **Private key** by dragging and dropping your PEM file directly into the upload field (or click to browse for the file)
5. Click **Connect**
{% hint style="info" %}
You no longer need to copy and paste certificate contents manually. The file upload field accepts .pem and .key formats, eliminating formatting errors that could occur during manual entry.
{% endhint %}
#### What Harmony Syncs
**From Apple Business Manager:**
* Device serial numbers and models
* Device color and product type
* Storage capacity (e.g. 512GB)
* Purchase dates, order numbers, order dates, purchase source type, purchase source ID, and part number
* Device enrollment status
* Ownership status (including Company, Personal, and Released)
* Warranty end dates (fetched directly from Apple's AppleCare Coverage API)
ABM data is matched to asset records by serial number and is only applied when a field is empty or missing, so existing values are always preserved. This enrichment works even when no MDM connection is configured.
#### Warranty Date Accuracy
Harmony retrieves warranty end dates for Apple devices by querying Apple's AppleCare Coverage API directly. This means your asset records reflect actual coverage periods, including extended AppleCare plans where applicable. If coverage data is unavailable for a specific device, Harmony falls back to estimating the warranty end date using purchase date plus one year.
#### Released Device Tracking
When a device is released from Apple Business Manager, Harmony automatically detects the change and updates the asset's ownership status to **Released**. This keeps your inventory accurate without requiring manual updates when devices are offboarded.
You can filter the asset table by ownership type - including Company, Personal, and Released - to get a focused view of your fleet's current state.
#### Apple Bluetooth Device Recognition
Harmony correctly identifies Apple Bluetooth accessories - including AirPods, keyboards, mice, and other Bluetooth peripherals - by their actual model names. Apple Bluetooth product IDs are included in the device catalog, so these devices no longer appear as unknown or generic entries in your inventory.
#### Use Cases
Zero-Touch Onboarding
New hire receives device, powers on, all apps and settings configured automatically
Bulk Device Deployment
Order 50 MacBooks, automatically assign to new employees
Device Lifecycle
From purchase through deployment to retirement
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.harmony.io/integrations/mdm/apple-business-manager.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.