iOS Google Device Policy app - "This Apple ID cannot be used to make purchases"

[shaun1]

Hello,

We are trying to set up MDM for our company-owned iPads. The list of apps has been restricted to a list of approved apps. When users try to download an approved app from the Google Device Policy app, an error message displays "This Apple ID cannot be used to make purchases ":

To outline how things are configured:

• Advanced mobile management is enabled.
• Apple Push Notification service certificate is set up.
• Federated authentication is set up and the Apple IDs are managed.
• Apple Business Manager is linked to Google Workspace.
• The iPads have been enrolled onto ABM and are listed in company-owned devices in the GW admin console. The iPads were manually added to ABM via Apple Configurator (i.e., "consumer" iPads not purchased through an Apple Authorised Reseller).
• The apps have been added to Web and mobile apps in GW admin console.
• The apps have been licensed via ABM and assigned to the correct location.

Strangely, the iPads will successfully install Gmail and Google Docs and ABM shows the licenses in use. 

I have taken screenshots of the user enrolment experience just in case it is obvious that something is not configured correctly:

https://docs.google.com/document/d/166vVE8IFhgmpftGDSQANXbW28D7mTX_X78f5cmLpcNs/preview

I would be grateful for any assistance to identify why these iPads are unable to download apps.

Kind regards,

Shaun

[shaun1 · Accepted solution]

Google Support got back to me - the error when attempting to download apps via GDP when using a Managed Apple ID in conjunction with Apple VPP is a known technical issue. Therefore, using Managed Apple ID with Google MDM is not currently supported.

The correct way to distribute company-owned iPads is for the end user to login using their personal Apple ID. The end user help docs do state "sign in with your personal Apple ID" when setting up a company-owned device.

https://support.google.com/a/users/answer/138740?sjid=11015326183956294123-EU#company-owned

[Nath]

Bye,
i cannot assign google device policy with vpp service. i have assigned google device policy to a business unit but it does not work. Can anyone help me?