Adding your Apple Business Manager credentials to Oomnitza

To integrate Oomnitza with Apple Business Manager, you must add a new mobile device management (MDM) server.

The requirements that must be met to complete this integration successfully are as follows:

• You have set up Apple Business Manager.
• You have not attached MDM servers to Apple Business Manager.

Restriction

The integration cannot be completed if you have attached MDM servers to your Apple Business Manager. 

About adding credentials

Before you integrate Apple Business Manager with Oomnitza, you must retrieve credentials from Apple Business Manager and add your credentials to Oomnitza.

To easily find the records that are uploaded to Oomnitza, it's best practice to create a dedicated user account for each integration. This will make it easier for you to retrieve the records that are uploaded to Oomnitza from the vendor application. 

Creating integration users 

Apple Business Manager uses OAuth authentication and requires the following details to be added to Oomnitza:

• Consumer Key
• Consumer Secret
• Access Token
• Access Token Secret

To retrieve this information, complete the following steps:

1. Generate a self-signed public/private key pair:
   1. Create a private key:
      

      openssl genrsa -aes128 -out private.key 2048

   2. Create a certificate signing request:
      

      openssl req -new -days 365 -key private.key -out request.csr

   3. Generate an SSL certificate:
      

      openssl x509 -in request.csr -out certificate.crt -req -signkey private.key -days 365

   4. Convert private .crt to .pem
      

      openssl x509 -in certificate.crt -out private.pem -outform PEM

2. In Apple Business Manager, create a new MDM Server and upload the public key.

3. Finish creating the MDM server by providing a name, and download the MDM server token (encrypted .p7m file file).
4. Decrypt the SMIME MDM server token from Apple Business Manager:
   

   openssl cms -decrypt -in smime.p7m -inkey private.key -out decrypted_token.p7m

5. View the decrypted token to extract consumer_key, consumer_secret, access_token, and access_secret:

   cat decrypted_token.p7m

Useful links

Apple Developer Documentation: Authenticating with a Device Enrollment Program (DEP) Server

Apple Developer Documentation: Examining Server Tokens

Apple Developer Documentation: Mobile Device Management Protocol Reference

Adding your credentials

To stream Apple Business Manager data into Oomnitza, add the credentials that you retrieved to Oomnitza:

Make life easier and add your credentials to Oomnitza before you create the integration.  

1. In Oomnitza, click Configuration > Security > Credentials.
2. Click Add new credential (+).
3. Search for the integration, and then click the forward arrow > to select the integration.
4. Enter your client credentials and any other additional information.
5. Click Authenticate. You are prompted to log in to authorize your request.
6. Click CREATE.

1. In the INFORMATION tab, add a name for the connection and choose an owner. The owner must have been added to the People page in Oomnitza.
2. In the AUTHORIZATION tab, complete these actions:
   1. Ensure that OAuth 2.0 is selected as the Authorization type.
   2. Ensure that Apple Business Manager is selected from the SaaS list.
   3. Enter your credentials.
3. Authenticate and click Create.