# Apple Automated Device Enrollment (ADE)

 Automated Device Enrollment (ADE) integrates with Apple Business Manager (ABM) to automatically enroll company-owned devices when they are turned on for the first time (or after a factory reset).

<p class="callout info"> ADE requires Apple Management (APNs) to be configured first. If needed, read [**Apple Management setup (APNs)**](https://enterprise.cerberusapp.com/docs/books/user-manual/page/apple-management-setup-apns "Apple Management setup (APNs)"). </p>

## How to enroll devices automatically

1. Add devices to your Apple Business Manager account.
2. After adding new devices to your ABM account, sync them in Cerberus Enterprise from the **Devices** section using the **Sync from ABM** action.
3. Create an ADE profile in the dashboard from **Enrollment** → **Apple Automated Device Enrollment (ADE)** → **New ADE profile**.
4. Assign an ADE profile to a device from the device details page using the **ADE profile** field.

## ADE profile settings (overview)

 An ADE profile controls how the device is enrolled and how Setup Assistant behaves. In Cerberus Enterprise, an ADE profile includes a name, an optional initial policy, and some enrollment options.

### Profile name

A human-readable name for the profile (for example, *Default ADE profile*).

### Policy

 The policy initially applied to enrolled devices. You can assign a policy when creating a new ADE profile.

### Enrollment options

- **MDM removable**: controls whether the MDM payload can be removed from the device.
- **Allow pairing**: controls whether pairing is allowed (deprecated by Apple in iOS 13).
- **Auto-advance setup**: automatically advances Setup Assistant through its screens.
- **Await device configured**: blocks Setup Assistant until the server marks the device as configured.
- **Mandatory**: prevents skipping profile application during setup.
- **Multi user (Shared iPad)**: configures the device for Shared iPad.
- **Supervised**: requests supervision for the device.

<p class="callout info"> After a device has an ADE profile assigned, it is ready to be automatically enrolled. </p>