Assigning ADE profiles across multiple Workspace One tenants introduces complexities that single-tenant admins rarely face. We break down the key gotchas around enrollment profile scoping, device sync timing, and how to avoid accidental re-enrollments when switching between environments.
Apple Device Enrollment (ADE), formerly DEP, is the cornerstone of modern iOS and macOS device management. But when you’re managing multiple Workspace One tenants — each with their own ADE server tokens and enrollment profiles — the complexity multiplies quickly.
Common pitfalls include profile assignment delays caused by sync timing between Apple Business Manager and Workspace One, accidental profile reassignment when devices appear in multiple tenant views, and enrollment loops caused by misconfigured profile settings.
This guide covers best practices for ADE profile management across multiple tenants, how to use WS One Power Admin’s multi-tenancy features to safely manage profiles without cross-contamination, and a checklist for auditing your ADE configuration before a large-scale deployment.