Google Workspace and how to manage apps on iOS devices

[StanPshebylsky]

We have a small Google Workspace tenant with "Google Workspace Enterprise Standard" license.
I've enabled advanced management for devices, enabled Google Directory accounts sync in Apple Business Management (ABM), created/enrolled all certificates, created a new MDM server in ABM, added devices (iPad Pro & iPhone) into ABM under the synchronized Apple ID users from Google Workspace.
They are visible in Google Workspace under the Devices > Mobile and endpoints > Company owned devices
But.
The screens of these iOS devices are blank and do not display any applications other than iTunes Store.
Profile "Google Workspace Device Policy Payload Profile" is visible in device properties.
I tried adding new applications to Apps > Web and mobile apps at the company-wide level for all users, put them as managed. Reset devices and re-enter them.
Applications still do not appear on devices.

I have already re-read all the documentation on this matter, both Google and Apple, and watched many videos from YouTube, but everywhere in the video the Android platform was given as examples. It seems that no one is even trying to manage Apple devices and apps on them from Google Workspace, or this functionality simply does not work...

[joeran_berendt · Accepted solution]

Hi Stan,
I think in order to force install applications you will have to go the vpp route. https://support.google.com/a/answer/14011165?hl=en&sjid=12784860412640926699-EU
"Purchase" Apps like the device policy app and Gmail in ABM, exchange token and configure the Vpp app as managed application set to force install could be the way forward. You should be able to then configure the app within the Google Admin console. This capability was added just recently and may not be discussed publicly yet.
https://workspaceupdates.googleblog.com/2024/07/apple-volume-purchasing-program-distribute-apps-for-...

Just keep in mind: Apple does not allow "managed" appleIDs to access the itunes app store. In the past, you had to set up a consumer appleID in order to download the device policy app first, which then kind of provided a Workspace internal app store.

Hope it helps. I wished the instructions and limitations were communicated in less  confusing language. The documentation definitely  has room for improvements.

[StanPshebylsky]

@joeran_berendt 
Sir, thank you very much for pointing me on the right direction.
Google really has a lot to think about in improving their documentation.
They can at least make training videos or just add more images of the interface and device screens to their official documentation to visually show the entire process of setting up certain features.
Thanks again for your help!