iOS devices with Unknown ownership, no UPN, and unable to change ownership

Question

I have some iOS devices (about 60) which are enrolled in Intune, but the following problems exist:

1. Device ownership is "unknown"
2. UPN is 'none'
3. Azure AD registered is 'unknown'
4. I have Intune Admin access, but unable to set the device ownership
5. Phone number field only shows the last 4 digits, as if it were a Personal device

I did check for corporate device identifiers, and the ones I checked were not listed, so I added them. However if the CDI does not exist in Intune, the device would normally enroll as Personal, and I would be able to change it; in this case I can't. We use Serial numbers for CDI. We are federated with Apple Business manager, and I verified the serial numbers are listed there as Corporate devices. There are no Enrollment Failures. Devices show as Compliant, with a last check-in of current date. I contacted several users and verified they have no issues with the devices; however, since the UPN does not show up, I can't see who a specific device belongs to, unless I can take a guess from the device name, carrier and phone number, and a lot of the device names are just 'iPhone'. I've forced a sync on the devices, had no effect. Devices are a mix of models, and OS version ranges from 15.1 to to 16.4

Answer 1

@Ray, Pam, Thanks for sharing the solution here. I appreciate it. To help others who has the same issue, please let me write a brief summary:

Issue Description:

Some iOS devices (about 60) which are enrolled in Intune, but the device ownership is "unknown" UPN is 'none'. Azure AD registered is 'unknown'

Cause:

The issue was caused by the change Apple made that no longer allows Company Portal authentication.

Resolution:

Changing the authentication method to "Setup Assistant with Modern Authentication" allowed the user to complete the enrollment process, and the device ownership and UPN now show correctly in Intune.

Thanks for your time and have a nice day!

Answer 2

@Ray, Pam, Thanks for posting in Q&A. From your description, it seems we are federated with Apple Business manager. But the device enrolled abnormal and the ownership is personal. Could you confirm if these devices are purchased from Apple Business Manager? And did we choose ADE enrollment method to do the enroll?

https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios

However, if we already using the above enrollment method but the issue still persists, I suggest open case to check int he background to get more help. Here is a link with the step to open case:

https://learn.microsoft.com/en-us/mem/get-support

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

I did open a support case on this.

Apparently the issue was caused by the change Apple made that no longer allows Company Portal authentication.
Changing the authentication method to "Setup Assistant with Modern Authentication" allowed the user to complete the enrollment process, and the device ownership and UPN now show correctly in Intune.

Answer 4

so currently we have a ADE enrollment profile setup with "Enroll with User Affinity". We are experiencing the same issue where the intune registration pending and device is unknown.

All our devices are coming through ABM to inutnes.

Does this could be the same scenario as discussed above?

Do we need chnage this to "Setup Assistant with Modern Authentication"?