Apple Configurator

How to add devices to Apple Business with Apple Configurator

Some of your Apple devices came in through a reseller and landed in Apple Business automatically. The rest — retail purchases, hand-me-downs, the iPad that’s been in the supply closet since 2021 — need Apple Configurator. This is the exact flow Arclion runs for Macs, iPhones, iPads, Apple TVs, and Vision Pros, including the one gotcha that surprises most new admins: the 30-day provisional period.

Published April 21, 2026 8 min read By Arclion Managed Services

In this guide

When to use Apple Configurator (and when not to)
The 30-day provisional period, in plain English
Which Configurator app handles which device
Prerequisites checklist
Mac-to-iPad walkthrough
iPhone-to-Mac walkthrough
Common errors and how to fix them
What to do after the device lands in Apple Business

Context

When to reach for Apple Configurator

Apple Business (formerly Apple Business Manager) receives most devices automatically because they were bought through Apple, an Apple Authorized Reseller, or a participating cellular carrier that the organization has linked. Apple Configurator is the manual escape hatch for every other device a business wants under management.

Retail purchases

Someone grabbed a MacBook Air at Best Buy or ordered from apple.com/shop on a personal account. The device isn’t in any business tenant yet — Configurator is how it gets there.

BYOD going corporate

An employee’s personal iPhone or iPad is being converted to a company-owned device as part of a role change or policy change. Configurator enrolls it into Apple Business and places it under supervision.

Second-hand and refurbished

Hardware bought used, inherited from another company, or pulled out of storage. If it isn’t already in another organization’s Apple Business tenant, Configurator can claim it.

Legacy fleet before Apple Business existed

The Macs and iPads your business has been running for years that predate your Apple Business signup. Configurator is how you retroactively bring them into the platform without buying replacements.

Read this first

The 30-day provisional period

Every device added through Apple Configurator enters a 30-day provisional state. It is the single most important thing to understand before you start, and the source of most “wait, the device just left MDM?” support tickets.

What the user sees

For 30 days after enrollment, the user can open Settings → General → VPN & Device Management on iOS/iPadOS (or System Settings → General → Device Management on macOS), tap Leave Remote Management, and walk the device out of supervision, MDM, and your Apple Business tenant entirely.

What happens on day 31

The Leave Remote Management option disappears. The device now behaves exactly like one that came from Apple or a linked reseller — the user cannot remove it, and release can only happen from the Apple Business admin side.

You cannot change the window

The 30 days is fixed by Apple. It cannot be shortened, extended, or disabled from Apple Business, from the MDM, or from any configuration profile. The only way to avoid the window is to buy devices through Apple or a linked Authorized Reseller — those devices never enter the provisional state.

What to do about it

Tell users. A one-sentence note when you hand over the device (“please don’t tap Leave Remote Management in Settings”) prevents almost every incident. After 30 days, the risk is gone.

Tool choice

Two Configurator apps, one decision

Apple ships two versions of Apple Configurator, and picking the wrong one is the most common reason new admins get stuck. The rule is short: if you’re enrolling a Mac, you need the iPhone app.

Apple Configurator for Mac

Free on the Mac App Store. Adds iPhone, iPad, Apple TV, and Apple Vision Pro to Apple Business. Does not add Macs. Requires macOS 13 Ventura or later; most admins are on macOS Tahoe 26 running Configurator 2.18.

Apple Configurator for iPhone

Free on the App Store, iPhone only — does not run on iPad. Adds iPhone, iPad, Apple Vision Pro, and Macs (Apple silicon or T2 Security Chip, macOS 12.0.1 or later). This is the only way to add a Mac to Apple Business via Configurator.

Before you start

Prerequisites checklist

The enrollment flow fails fast and unhelpfully when one of these is missing. Run through the list once before you plug anything in.

The right Configurator version

Latest Apple Configurator on the Mac App Store (2.18 at time of writing) and Apple Configurator for iPhone 1.5 on the iPhone App Store if you’re enrolling a Mac.

A Managed Apple Account with the right role

Sign in with a Managed Apple Account that has Administrator or Device Enrollment Manager role in Apple Business. Configurator literally refuses to proceed otherwise.

A freshly wiped device

The target device must be sitting at the Hello or Country or Region pane of Setup Assistant. If it’s already past Setup Assistant, erase it again — there is no shortcut.

Clean Wi-Fi

Real internet access, no captive portals, no hotel or guest networks. Apple’s enrollment endpoints on apple.com, itunes.apple.com, and mdmenrollment.apple.com must all be reachable during the bump.

Bluetooth on (iPhone-to-Mac flow)

The iPhone-to-Mac pairing is a peer-to-peer handshake over Bluetooth plus Wi-Fi. Both devices need Bluetooth enabled, even though the enrollment payload itself goes over Wi-Fi.

USB-C cable (Mac-to-iPad/iPhone flow)

A working USB-C cable (USB-A to Lightning for older iPads). Apple TVs pair over Ethernet on the same LAN, not USB.

Walkthrough 1

Mac → iPhone or iPad

The simpler of the two flows. Apple Configurator for Mac, a USB-C cable, and a wiped iPhone or iPad.

Step 1 — Sign in to Configurator

Open Apple Configurator on the Mac. On first run, go to Apple Configurator → Settings → Organizations and sign in with the Managed Apple Account that has Administrator or Device Enrollment Manager role. Complete 2FA.

Step 2 — Plug in and trust

Connect the iPhone or iPad to the Mac over USB-C. Unlock it and tap Trust if prompted. The device appears as a tile in the Configurator window. Select it and click Prepare in the toolbar.

Step 3 — Prepare Assistant settings

Set Configuration to Manual Configuration. Check Add to Apple School Manager or Apple Business Manager and Supervise devices. The step most admins miss: uncheck “Activate and complete enrollment.” Leaving it unchecked returns the device to the Hello screen so you can hand it to the end user.

Step 4 — MDM placeholder

On the Enroll in MDM Server pane, choose New Server… and give it a descriptive name (“Apple Configurator Placeholder” works fine). You don’t need a real MDM URL here — the point of this step is Apple Business placement. Click through the trust prompts.

Step 5 — Supervision identity

On the Supervision Identity pane, choose Generate a new supervision identity unless your organization has already standardized on one. Pick which Setup Assistant panes to skip on first boot, then click Prepare.

Step 6 — Let it finish

The device erases, reboots, and during that window Configurator writes the enrollment record into Apple Business. When the device is back at the Hello screen, it’s done. You’ll find it in Apple Business under Devices → Apple Configurator as a virtual source group.

Walkthrough 2

iPhone → Mac

The flow with the most impressive demo moment: the iPhone pairs to the Mac by scanning an animated pattern that appears on the Mac’s screen. Required for every Mac enrollment via Configurator.

Step 1 — Prepare the Mac

On the target Mac, run Erase All Content and Settings (or boot into macOS Recovery, use Disk Utility, and reinstall macOS). Boot the Mac and walk Setup Assistant forward until you reach the Country or Region pane. Stop there. If you click past it, restart the Mac and try again.

Step 2 — Open Configurator on iPhone

On the iPhone, open Apple Configurator, confirm you’re signed in with the right Managed Apple Account, and make sure Bluetooth is on. Tap the blue + button to start a new enrollment.

Step 3 — Pair with the animated pattern

Hold the iPhone near the Mac. The Mac displays an animated swirl that looks like a small galaxy. Point the iPhone’s camera at the pattern to pair. If lighting is bad or the camera won’t catch it, tap Pair Manually on both devices and type the 6-digit code the Mac shows into the iPhone.

Step 4 — Share Wi-Fi

The iPhone asks how the Mac should connect to Wi-Fi. The simplest answer is to share the iPhone’s current network. You can also choose a different saved network or attach a pre-built Wi-Fi configuration profile. Pick one and continue.

Step 5 — Let the Mac check in

The Mac shows an Apple logo and a progress bar while it reaches out to Apple Business and registers itself. When Setup Assistant resumes normally, the enrollment is complete. Confirm by checking Devices → Apple Configurator in Apple Business.

When it breaks

Common errors and fixes

In rough order of frequency, here are the things that go wrong during a Configurator enrollment and the fix that actually resolves each one.

“Provisional Enrollment Failed”

Almost always a network issue during the bump or a device that’s still attached to a prior organization’s Apple Business. Confirm real internet access, wipe the device again, and check it isn’t still paired to a previous tenant in Settings → General → VPN & Device Management.

“Couldn’t be added to Apple Business Manager”

The signed-in Managed Apple Account doesn’t have the right role. Confirm in Apple Business that the account is an Administrator or Device Enrollment Manager, not just a Content Manager or Staff account.

The animated pattern never shows up on the Mac

Three causes, in order: the Mac isn’t sitting on the Country or Region pane (too early or too late in Setup Assistant); the Mac isn’t Apple silicon or T2; or macOS is older than 12.0.1. Walk through those three and restart.

The camera scan refuses to resolve

Don’t fight it. Tap Pair Manually, type the 6-digit code displayed on the Mac into the iPhone, and continue. Works every time.

“Device already belongs to another organization”

You cannot claim a device locked to another Apple Business tenant. Either wipe and re-try (if the previous ownership was loose), or contact that organization and ask them to release the device from their Apple Business. No workaround exists.

Prepare step hangs on the Configurator Mac

Uncommon but real: Content Caching on the Mac running Configurator can block the enrollment handshake. Go to System Settings → General → Sharing, turn Content Caching off, and run the prepare action again.

After enrollment

Get the device to your real MDM

A device in Apple Business is not a managed device. The Configurator source group is a staging area — you still need to assign each device to your actual MDM server before policy, apps, or standards apply.

One-off assignment

In Apple Business, open Devices → Apple Configurator, select the device or devices you just enrolled, and choose Edit Device Management. Pick your real MDM server and confirm. The device will sync against the MDM the next time it checks in.

Default device assignment (recommended)

For any business that’s going to add more than a handful of devices through Configurator, go to Settings → Device Management Settings → Default Device Assignment and set default MDM servers for Mac, iPhone, and iPad. Every future Configurator-enrolled device flows to the right MDM automatically, with zero clicks.

Want this handled for you?

Arclion handles bulk enrollment as part of Foundation

If the thought of bumping forty existing devices with an iPhone is making you reconsider your career — that’s the work Arclion does. Our Foundation engagement covers Apple Business setup, Configurator bulk enrollment, supervision identity management, MDM connection, and the baseline device standards a small business actually needs. Ongoing management is flat per-device.

What to send

Approximate device count and mix (Mac / iPhone / iPad)
Whether Apple Business is already set up
Which MDM, if any, is already in place

Book an environment review

Keep reading