What is Apple VPP (Volume Purchase Program)?

Apple Volume Purchase Program (Apple VPP) is a free service offered by Apple to organizations and educational institutions. It enables IT admins to purchase and distribute apps and books in bulk, from a unified console.

This Apple VPP Guide covers:

Apple VPP- Definition

Apple VPP allows organizations or educational institutions to purchase corporate apps in bulk, and silently deploy and manage them on devices. Usine Apple VPP, organizations can purchase and distribute apps for all Apple devices including iPhones (iOS), iPads (iPadOS) and Macs (macOS). Organizations can integrate Apple VPP with their preferred mobile device management solutions, purchase app licenses and silently install apps on managed devices.

ManageEngine's Mobile Device Manager Plus (MDM) integrates with Apple Volume Purchase Program (Apple VPP), thereby allowing organizations to leverage the various benefits offered. In case of educational institutions MDM can be integrated with the Apple VPP for Education, a portal that's available exclusively for educational institutions and in case of businesses or organizations, MDM can be integrated with Apple VPP for Business.

How does Apple VPP work?

To leverage the benefits offered by Apple Volume Purchase Program (Apple VPP), organizations must perform the following steps:

Enroll into Apple VPP

The first step to start managing apps using Apple VPP, is to enroll into the Volume Purchase Program. If your organization already has an account with Apple Deployment Program to simplify the management of devices, you can access Apple VPP using the same account. Else, follow the steps given below to create a new account and enroll into Apple VPP.

Step 1: On Apple Deployment Program, create an account using a corporate email ID. Apple doesn't allow the account to be associated to a personal email ID.

Step 2: Verify the specified email ID and enable two-factor authentication. Save the Recovery Code displayed. This can be used to access the account in case you forget the account password.

Step 3: For further verification, Apple requires the following details to be entered:

  • Verification contact details of an individual who can attest to your authority to manage the apps and devices on behalf of your organization. They should have the authority to sign the Legal Agreement with Apple and accept it's Terms and Conditions
  • Business Information such as D-U-N-S number, business address, and zip code
  • Tax registration information, which usually is country-specific

Apple will verify the details and you'll receive an email containing the Terms and Conditions that need to be accepted to complete the enrollment with Apple VPP.

Integrate Apple VPP with Mobile Device Manager Plus

Follow the steps given below to integrate your corporate Apple VPP account with Mobile Device Manager Plus:

Step 1: Login to Apple VPP with your corporate email ID and download the sToken available on the portal by clicking on the account email and selecting Account Summary.

Apple VPP sToken download

Step 2: Upload the sToken on the MDM console by navigating to Device Mgmt -> App Repository -> Apple App Management

Step 3: For App Installation Type, select Without Apple ID to allow silent app installation on Supervised devices.

This completes the integration of Mobile Device Manager Plus with Apple VPP.

Adding/Purchasing app licenses on Apple VPP

You can purchase the required number of licenses on the Apple VPP portal by following the steps given below:

Step 1: Search for the app for which the licenses need to be added

Step 2: Specify the number of licenses to be added/purchased and the Assign To details

Step 3: Click on Get to add the licenses

The app will be added to the MDM App Repository during the daily sync, or you can manually sync the apps from Apple VPP by clicking on Sync Apps -> Sync VPP Apps

Once the apps are distributed to the required devices, in case of Supervised devices, the installation can be initiated without any user intervention. Whereas in case of unsupervised devices, the user must initiate the app installation, though they'll not be prompted to enter their Apple ID, unless specified otherwise while configuring Apple VPP.

Benefits of Apple Volume Purchase Program

In addition to providing a unified console for simplified management of apps, Apple VPP also provides the following benefits:

  • License Management: To distribute apps on devices, the admins must add the required number of licenses to their accounts in case of free apps, and for paid apps the licenses can be purchased using the corporate account . These licenses are assigned every time the app is distributed to devices, thereby allowing the admins to keep a track of the number of devices on which the apps are installed. The licenses can be revoked and re-assigned when the app is not used.
  • Install apps without Apple ID: When apps are manually installed from the App Store, it's mandatory to associate an Apple ID to the device. With Apple VPP, associating an Apple ID is optional, thereby ensuring the app is assigned to the device instead of the respective user's Apple account. On Supervised devices, this also allows the apps to be installed on the devices without any user intervention.
  • Manage app updates: Apps frequently receive updates containing security fixes or enhancements. Since an app distributed using Apple VPP is assigned to the device instead of the user's account, the device will not receive the app updates, thereby providing the IT admins complete control over the app updates. Admins can thoroughly test out the app updates before installing it on the devices.

Migrating from Apple VPP to ABM

Previously Apple provided two separate portals Apple DEP and Apple VPP for device and app management respectively. Recently, Apple has upgraded and combined both these portals into Apple Business Manager (ABM) for businesses and Apple School Manager (ASM) for educational institutions. You can migrate your devices from Apple DEP and apps from Apple VPP by following the steps given here.