{"$schema": "https://raw.githubusercontent.com/guitaripod/wwdc-sessions/master/schema/transcript.schema.json", "id": "wwdc2026-206", "language": "eng", "source": "https://developer.apple.com/videos/play/wwdc2026/206", "wordCount": 3139, "segments": [{"start": 7.0, "text": "Hello and welcome!"}, {"start": 8.0, "text": "My name is Cyrus Daboo and I am an engineer on the Device Management team."}, {"start": 14.0, "text": "I'm here to show you what's new in managing Apple devices."}, {"start": 18.0, "text": "Here's what I have for you."}, {"start": 20.0, "text": "I'll discuss what's new in Apple services."}, {"start": 23.0, "text": "I'll then cover a number of additions to declarative management."}, {"start": 27.0, "text": "Followed by updates to app management."}, {"start": 31.0, "text": "And details of new identity management features."}, {"start": 35.0, "text": "I'll finish off with a quick update to some education-related technologies."}, {"start": 41.0, "text": "First, some updates to Apple services for business and education."}, {"start": 45.0, "text": "Apple Business is a new all-in-one platform,"}, {"start": 48.0, "text": "that combines tools for businesses of all sizes,"}, {"start": 51.0, "text": "to effectively run and grow their organization."}, {"start": 55.0, "text": "This includes a big expansion,"}, {"start": 57.0, "text": "with Apple Business now available in over 200 countries and regions."}, {"start": 62.0, "text": "This gives your organization features like zero-touch deployment,"}, {"start": 66.0, "text": "Managed Apple Accounts for users,"}, {"start": 68.0, "text": "and the new built-in device management features."}, {"start": 71.0, "text": "This makes it easier for businesses"}, {"start": 73.0, "text": "to quickly get started with managing Apple devices."}, {"start": 77.0, "text": "To support automation of these new features,"}, {"start": 80.0, "text": "there are new APIs for Apple Business,"}, {"start": 83.0, "text": "including creating Blueprints and Configurations,"}, {"start": 86.0, "text": "modifying users and groups,"}, {"start": 88.0, "text": "app license information, and getting audit events."}, {"start": 93.0, "text": "These join the existing APIs to list servers, devices, and inventory,"}, {"start": 98.0, "text": "manage the assignment of inventory to device management servers,"}, {"start": 102.0, "text": "and get AppleCare warranty details for devices."}, {"start": 106.0, "text": "Be sure to check out the documentation on the new APIs"}, {"start": 110.0, "text": "to start building them into your products."}, {"start": 113.0, "text": "There's also a new volume licensing mechanism"}, {"start": 115.0, "text": "for subscriptions in App Store apps."}, {"start": 118.0, "text": "This allows IT administrators to purchase and manage app subscriptions."}, {"start": 123.0, "text": "It'll be available later in Apple Business and Apple School Manager."}, {"start": 127.0, "text": "You can use a device management service, to assign app subscriptions"}, {"start": 131.0, "text": "using the same workflows,"}, {"start": 132.0, "text": "that already exist for distributing apps at scale."}, {"start": 136.0, "text": "Take a look at the \"Offer subscriptions to groups and organizations\" video"}, {"start": 141.0, "text": "for all the details."}, {"start": 143.0, "text": "These are exciting new features, and Apple Business and Apple School Manager"}, {"start": 147.0, "text": "will continue to evolve to meet the needs of IT teams everywhere."}, {"start": 154.0, "text": "Now I'll cover changes"}, {"start": 155.0, "text": "to device management support on Apple devices."}, {"start": 158.0, "text": "I want to start by revisiting a core pillar of Apple's device management story."}, {"start": 163.0, "text": "\"The future of device management is declarative management\" -"}, {"start": 167.0, "text": "which describes the move to declarative management."}, {"start": 170.0, "text": "But the future is now."}, {"start": 173.0, "text": "Declarative management isn't something on the roadmap anymore."}, {"start": 177.0, "text": "It's here."}, {"start": 178.0, "text": "It's shipping."}, {"start": 179.0, "text": "It's in production across fleets around the world."}, {"start": 182.0, "text": "If you're managing devices today without using it,"}, {"start": 185.0, "text": "you're working harder than you need to."}, {"start": 188.0, "text": "So now \"The standard for device management is declarative management.\""}, {"start": 195.0, "text": "The declarative management enhancements I'll cover here weren't built in isolation."}, {"start": 200.0, "text": "They were built alongside the great new hardware that was recently released."}, {"start": 205.0, "text": "There is incredible momentum in business and education,"}, {"start": 208.0, "text": "thanks in part to all new Mac computers."}, {"start": 211.0, "text": "MacBook Neo is great for many first-time Mac users,"}, {"start": 214.0, "text": "particularly in K-12 and higher education."}, {"start": 219.0, "text": "And the performance improvements in the latest MacBook Air and MacBook Pros,"}, {"start": 224.0, "text": "are ideal for demanding AI workflows popular in enterprise."}, {"start": 229.0, "text": "Together, this tells one clear story:"}, {"start": 232.0, "text": "the Mac and the full Apple device lineup"}, {"start": 235.0, "text": "isn't just a choice for business and education."}, {"start": 238.0, "text": "It's the choice."}, {"start": 240.0, "text": "To make it easier to switch to a new Mac,"}, {"start": 243.0, "text": "a new managed migration feature is available to help migrate data,"}, {"start": 247.0, "text": "while preserving device management enrollment and settings."}, {"start": 251.0, "text": "To activate this, a new declarative configuration"}, {"start": 254.0, "text": "is deployed to the device right after device management enrollment."}, {"start": 259.0, "text": "This gives IT administrators control over which accounts, files,"}, {"start": 263.0, "text": "and security and privacy settings are migrated."}, {"start": 267.0, "text": "Migration Assistant reports declarative management status,"}, {"start": 270.0, "text": "so IT administrators can monitor the progress of migration."}, {"start": 274.0, "text": "These settings are shown to the user, but they're locked."}, {"start": 278.0, "text": "All the user needs to do is click Continue, to begin the migration process."}, {"start": 282.0, "text": "This is a great way to get your users up and running with a new Mac."}, {"start": 287.0, "text": "The 26.4 releases also included new declarative configurations"}, {"start": 291.0, "text": "for Apple Intelligence, Siri, and keyboard settings."}, {"start": 296.0, "text": "And in the latest releases, these configurations have been updated,"}, {"start": 300.0, "text": "to provide IT administrators granular controls"}, {"start": 303.0, "text": "for the individual Apple Intelligence and Siri features,"}, {"start": 307.0, "text": "that are now available to users."}, {"start": 311.0, "text": "Now I'll go over"}, {"start": 312.0, "text": "how you can leverage the power of the declarative management data model,"}, {"start": 316.0, "text": "starting with credential management."}, {"start": 319.0, "text": "Configuration profiles have limits on how they can reference credentials,"}, {"start": 324.0, "text": "often forcing large profiles to be used, and making the update process inefficient."}, {"start": 329.0, "text": "Since the declarative model supports a many-to-many relationship,"}, {"start": 333.0, "text": "multiple configurations can reference a single credential."}, {"start": 337.0, "text": "Configuration profiles that use credentials"}, {"start": 340.0, "text": "are being transitioned to declarative configurations,"}, {"start": 343.0, "text": "so managing the lifecycle of credentials is much more efficient."}, {"start": 348.0, "text": "When you need to refresh a credential,"}, {"start": 350.0, "text": "your server only needs to change the asset,"}, {"start": 352.0, "text": "and the device takes care of updating all the configurations that use it."}, {"start": 357.0, "text": "Here are the new configurations."}, {"start": 360.0, "text": "Whenever these configurations need a credential"}, {"start": 363.0, "text": "be it a certificate, identity, or password,"}, {"start": 366.0, "text": "a declarative asset is used for the credential data."}, {"start": 371.0, "text": "The status channel is another powerful element of declarative management."}, {"start": 376.0, "text": "It removes the need for servers"}, {"start": 377.0, "text": "to continually poll devices for state changes."}, {"start": 381.0, "text": "The new release adds a number of declarative status items,"}, {"start": 384.0, "text": "such as the enrollment type, awaiting device configuration,"}, {"start": 388.0, "text": "return to service state, Shared iPad,"}, {"start": 391.0, "text": "the device's current push token, and several more."}, {"start": 395.0, "text": "Plus there's a new status item"}, {"start": 397.0, "text": "to indicate if Lockdown Mode has been turned on by the user."}, {"start": 403.0, "text": "A new feature that the status channel exposes"}, {"start": 405.0, "text": "is device system health monitoring."}, {"start": 408.0, "text": "iOS and iPadOS devices can report issues with hardware components to users,"}, {"start": 413.0, "text": "through the Settings app."}, {"start": 415.0, "text": "Now iOS and iPadOS 27 can provide this same information"}, {"start": 420.0, "text": "in a new declarative management status item, for device system health."}, {"start": 425.0, "text": "This includes hardware components such as the baseband, camera,"}, {"start": 430.0, "text": "Face ID, Touch ID, and more."}, {"start": 433.0, "text": "This gives IT administrators a comprehensive view of device health"}, {"start": 437.0, "text": "across their entire fleet,"}, {"start": 440.0, "text": "so they can take proactive action and keep users productive."}, {"start": 444.0, "text": "Another new feature for device management"}, {"start": 446.0, "text": "is one that streamlines the process of collecting and submitting logs"}, {"start": 450.0, "text": "to AppleCare for analysis."}, {"start": 453.0, "text": "Today, AppleCare support staff have a way of providing customers"}, {"start": 457.0, "text": "with a link that triggers an enhanced log collection process on the device."}, {"start": 462.0, "text": "In iOS, iPadOS, tvOS and macOS 27 releases,"}, {"start": 467.0, "text": "IT administrators can now start enhanced log collection"}, {"start": 471.0, "text": "on organization-owned devices."}, {"start": 474.0, "text": "That is done by using the new TriggerEnhancedLogCollection command."}, {"start": 479.0, "text": "Thus IT teams can facilitate AppleCare collecting these vital logs when needed."}, {"start": 485.0, "text": "And declarative status is available to help IT teams monitor this process."}, {"start": 492.0, "text": "Another area with expanded status is Content Caching."}, {"start": 496.0, "text": "Content Caching reduces bandwidth usage"}, {"start": 498.0, "text": "and speeds up installation of software updates,"}, {"start": 501.0, "text": "applications, Apple Intelligence, and other content on Apple devices,"}, {"start": 506.0, "text": "by storing those items on Mac computers hosted on the local network."}, {"start": 511.0, "text": "Content caching servers can be scaled to support large organizations"}, {"start": 515.0, "text": "with wide-spread networks."}, {"start": 517.0, "text": "In macOS 27, there's now a declarative configuration"}, {"start": 521.0, "text": "to control the Content Caching service on a Mac,"}, {"start": 524.0, "text": "and new declarative status items to report on the state of the service."}, {"start": 528.0, "text": "This gives IT administrators a direct way"}, {"start": 531.0, "text": "to monitor the health of their content caching server fleet."}, {"start": 535.0, "text": "Also, content cache servers have a new feature"}, {"start": 538.0, "text": "that allows them to directly send their own reports"}, {"start": 540.0, "text": "to an arbitrary HTTPs endpoint."}, {"start": 544.0, "text": "This allows for more sophisticated monitoring consoles to be built"}, {"start": 548.0, "text": "to help IT administrators."}, {"start": 550.0, "text": "All these new status items provide device management services"}, {"start": 553.0, "text": "with even more ways to report useful, and critical information,"}, {"start": 557.0, "text": "to IT administrators and support staff."}, {"start": 560.0, "text": "Remember, adding support for declarative status items,"}, {"start": 564.0, "text": "is a simple matter of subscribing to the items,"}, {"start": 567.0, "text": "and the device then sends any changes to the status values"}, {"start": 570.0, "text": "to your server as they occur."}, {"start": 574.0, "text": "Another important area of device management"}, {"start": 576.0, "text": "is managing and configuring apps."}, {"start": 579.0, "text": "This is one of the most important aspects of device management."}, {"start": 583.0, "text": "So now I'll describe the changes in this release for app management."}, {"start": 588.0, "text": "First, the declarative app configuration feature"}, {"start": 591.0, "text": "available in iOS, iPadOS, and visionOS is now coming to macOS 27."}, {"start": 598.0, "text": "This allows for secure provisioning of managed apps"}, {"start": 601.0, "text": "with credentials and configuration,"}, {"start": 603.0, "text": "including the ability to use hardware-bound keys"}, {"start": 607.0, "text": "and to enable Managed Device Attestation support,"}, {"start": 610.0, "text": "for authenticating apps and extensions with enterprise services."}, {"start": 615.0, "text": "This opens the door"}, {"start": 616.0, "text": "to more secure enterprise app deployment and configuration on macOS."}, {"start": 621.0, "text": "Please encourage your enterprise app developers"}, {"start": 623.0, "text": "to adopt the ManagedApp framework in their products,"}, {"start": 627.0, "text": "to help keep your organization operating smoothly and securely."}, {"start": 633.0, "text": "Next, packages."}, {"start": 635.0, "text": "macOS 27 now gives IT administrators the option to remove all the files"}, {"start": 640.0, "text": "and directories that are installed by a declarative management package,"}, {"start": 644.0, "text": "when the package configuration itself is removed."}, {"start": 648.0, "text": "This ensures unwanted data and files are not left behind on devices"}, {"start": 653.0, "text": "when no longer needed."}, {"start": 656.0, "text": "Now I want to cover privacy settings."}, {"start": 659.0, "text": "Disclosure and consent is a key element of Apple's approach to privacy."}, {"start": 664.0, "text": "This means users are presented with prompts,"}, {"start": 667.0, "text": "when apps or websites in Safari,"}, {"start": 670.0, "text": "try to access features like the camera, microphone, or location."}, {"start": 675.0, "text": "For some workers this means having to tap though"}, {"start": 677.0, "text": "multiple prompts for the apps they use everyday."}, {"start": 680.0, "text": "These prompts may be quickly dismissed by users,"}, {"start": 683.0, "text": "resulting in improperly configured apps."}, {"start": 686.0, "text": "To streamline this process, in iOS, iPadOS and macOS 27,"}, {"start": 692.0, "text": "there is a new consolidated privacy consent prompt,"}, {"start": 695.0, "text": "which is shown when an app is first launched,"}, {"start": 698.0, "text": "or a website first appears in Safari."}, {"start": 701.0, "text": "Let's examine how this works for apps."}, {"start": 704.0, "text": "The prompt shows the name of the organization and app."}, {"start": 707.0, "text": "A justification string provided by the IT administrator,"}, {"start": 711.0, "text": "and details of each component whose privacy default is being recommended,"}, {"start": 716.0, "text": "along with the app's own justification for each one."}, {"start": 719.0, "text": "This gives the user a clear picture of what is being asked for,"}, {"start": 723.0, "text": "and why, and by whom."}, {"start": 725.0, "text": "There are two buttons in the prompt."}, {"start": 727.0, "text": "If the user chooses Allow,"}, {"start": 729.0, "text": "then the defaults are applied to the privacy settings,"}, {"start": 732.0, "text": "and no additional prompts appear as they use the app."}, {"start": 736.0, "text": "If the user chooses Not Now,"}, {"start": 738.0, "text": "then consent prompts appear when they use the app and it accesses the components,"}, {"start": 743.0, "text": "just like the unmanaged state."}, {"start": 745.0, "text": "Importantly, the Allow button is the default button,"}, {"start": 749.0, "text": "and is clearly highlighted to steer the user towards making the right choice."}, {"start": 754.0, "text": "The same prompt for apps"}, {"start": 756.0, "text": "also applies to websites asking for privacy permissions in Safari."}, {"start": 761.0, "text": "The same elements are present, and again the default button is clearly shown."}, {"start": 765.0, "text": "Here are the privacy components that can be managed for both apps and websites."}, {"start": 770.0, "text": "IT administrators determine which of these a user needs access to in their apps,"}, {"start": 776.0, "text": "or on websites, and then they create a declarative configuration"}, {"start": 780.0, "text": "that lists the app or website, together with the selected components."}, {"start": 785.0, "text": "These new controls preserve user privacy, while eliminating multiple prompts."}, {"start": 791.0, "text": "It also gives IT administrators the comfort in knowing"}, {"start": 794.0, "text": "that users are now more likely to make the right choice."}, {"start": 799.0, "text": "Now let's turn our attention to a critical part of managing apps on macOS:"}, {"start": 804.0, "text": "the ability to control which apps, and other binaries are running."}, {"start": 809.0, "text": "Mac computers contain a collection of apps from the App Store,"}, {"start": 812.0, "text": "and other binaries and executables likely installed from outside the App Store."}, {"start": 818.0, "text": "Many of these are managed,"}, {"start": 819.0, "text": "but there are many more that are installed intentionally"}, {"start": 822.0, "text": "or unintentionally by the user,"}, {"start": 825.0, "text": "but those don't always comply with the organization's requirements."}, {"start": 829.0, "text": "Organizations need control over allowed binaries"}, {"start": 832.0, "text": "to meet compliance regulations."}, {"start": 835.0, "text": "So, in macOS 27, new declarative management settings"}, {"start": 839.0, "text": "are available to control binary execution."}, {"start": 843.0, "text": "This uses the Endpoint Security framework to allow or deny binary execution,"}, {"start": 848.0, "text": "and to shut down any processes"}, {"start": 850.0, "text": "associated with a binary that has been denied."}, {"start": 853.0, "text": "There are flexible rules to match binaries, which utilize code signing properties,"}, {"start": 858.0, "text": "to ensure the matched binaries are indeed the ones"}, {"start": 861.0, "text": "the IT administrator wants to control."}, {"start": 864.0, "text": "There is also an option to automatically allow any managed app,"}, {"start": 869.0, "text": "without having to add specific rules for each one."}, {"start": 873.0, "text": "The new app privacy controls and binary blocking restrictions"}, {"start": 877.0, "text": "are part of a new declarative app.settings configuration."}, {"start": 882.0, "text": "And the Safari website permissions are part of the existing declarative"}, {"start": 886.0, "text": "safari.settings configuration."}, {"start": 889.0, "text": "These are great new capabilities for controlling apps, binaries,"}, {"start": 893.0, "text": "privacy prompts and more."}, {"start": 896.0, "text": "Now I'll cover another important enterprise feature for Mac computers:"}, {"start": 901.0, "text": "the use of platform single sign-on to integrate with identity providers."}, {"start": 906.0, "text": "The last few releases have significantly improved"}, {"start": 909.0, "text": "and enhanced Platform SSO on macOS,"}, {"start": 912.0, "text": "to simplify setup and better support shared workflows."}, {"start": 916.0, "text": "All of it grounded with the goals of making login more intuitive,"}, {"start": 920.0, "text": "highly secure, and providing more phishing resistant ways"}, {"start": 924.0, "text": "for organizations to keep their users and their data on Mac computers safe."}, {"start": 931.0, "text": "And we are taking Platform SSO even further with macOS 27,"}, {"start": 935.0, "text": "starting with a new login and unlock experience."}, {"start": 939.0, "text": "Right from the start it's clear to the user"}, {"start": 941.0, "text": "they are using their organization's credentials."}, {"start": 944.0, "text": "Users can enter their password or use Touch ID, as they do today."}, {"start": 949.0, "text": "Touch ID is the most secure"}, {"start": 951.0, "text": "and convenient way for users to unlock their Mac,"}, {"start": 954.0, "text": "but until now it's been optional."}, {"start": 956.0, "text": "New in macOS 27 is the ability for IT administrators"}, {"start": 961.0, "text": "to require users to use Touch ID,"}, {"start": 963.0, "text": "in addition to entering their password on organization devices,"}, {"start": 967.0, "text": "offering a built-in second factor."}, {"start": 970.0, "text": "This is enforced when logging in, at screen unlock,"}, {"start": 974.0, "text": "and even for the FileVault unlock process."}, {"start": 979.0, "text": "Modern authentication standards allow for many different ways to authenticate users,"}, {"start": 983.0, "text": "offering security features to prevent phishing attacks,"}, {"start": 986.0, "text": "as well as adapt the authentication interface"}, {"start": 989.0, "text": "to match organization branding,"}, {"start": 991.0, "text": "security policies, and user demographics."}, {"start": 994.0, "text": "This includes one-time codes for multi-factor authentication."}, {"start": 998.0, "text": "Push notifications for conditional access workflows."}, {"start": 1002.0, "text": "And QR codes for a password-free sign-in, designed for young learners"}, {"start": 1006.0, "text": "and shared-device environments like healthcare, retail, and logistics."}, {"start": 1011.0, "text": "And there are lots more."}, {"start": 1013.0, "text": "To support these,"}, {"start": 1015.0, "text": "macOS 27 introduces a new web-based authentication option for Platform SSO."}, {"start": 1021.0, "text": "Identity providers and organizations"}, {"start": 1024.0, "text": "now have the ability to use a secure web view"}, {"start": 1027.0, "text": "that renders in the login window and screen unlock."}, {"start": 1030.0, "text": "This can run any modern authentication flow"}, {"start": 1033.0, "text": "including custom challenge-response sequences."}, {"start": 1036.0, "text": "The web view operates within a tightly controlled execution context"}, {"start": 1040.0, "text": "managed by the operating system,"}, {"start": 1042.0, "text": "to ensure organizations and users are protected."}, {"start": 1046.0, "text": "Also, the web view can scan a QR code."}, {"start": 1049.0, "text": "When a scan is initiated,"}, {"start": 1051.0, "text": "the camera operates entirely within a secure system process,"}, {"start": 1055.0, "text": "completely isolated from the web view itself."}, {"start": 1058.0, "text": "The web page only receives the decoded data from the QR code,"}, {"start": 1062.0, "text": "never the raw camera feed or any image data."}, {"start": 1065.0, "text": "This ensures that websites can't capture images of the user or their surroundings,"}, {"start": 1070.0, "text": "even inadvertently."}, {"start": 1072.0, "text": "Web authentication works across the login window, screen unlock,"}, {"start": 1076.0, "text": "and the FileVault unlock process."}, {"start": 1079.0, "text": "And provides secure and enforceable authentication."}, {"start": 1082.0, "text": "Offline authentication is also supported, to ensure continuity of access"}, {"start": 1086.0, "text": "without weakening the security posture of unconnected devices."}, {"start": 1090.0, "text": "For enterprises, this opens up deep customization such as:"}, {"start": 1094.0, "text": "localized sign-in pages, accessibility-optimized flows,"}, {"start": 1099.0, "text": "conditional prompting based on device state,"}, {"start": 1101.0, "text": "and seamless integration with existing identity infrastructure."}, {"start": 1105.0, "text": "Developers like Authentik, ClassLink, and Identity Automation,"}, {"start": 1109.0, "text": "are working to enable the new web-login"}, {"start": 1112.0, "text": "and QR code support for Platform SSO in their products."}, {"start": 1118.0, "text": "Now let's cover Authenticated Guest Mode with Platform SSO."}, {"start": 1123.0, "text": "It allows users, such as as a nurse or doctor going from room to room,"}, {"start": 1128.0, "text": "to quickly and securely login to a shared Mac in a temporary session."}, {"start": 1133.0, "text": "macOS 27 now extends this capability to allow an authenticated guest user,"}, {"start": 1138.0, "text": "to also sign in on FileVault protected Mac computers,"}, {"start": 1142.0, "text": "to unlock FileVault itself."}, {"start": 1144.0, "text": "So full disk encryption is now available to protect the data on the device,"}, {"start": 1148.0, "text": "as the authenticated guest user uses the device,"}, {"start": 1151.0, "text": "ensuring compliance with data protection regulations."}, {"start": 1155.0, "text": "This functionality is automatically available"}, {"start": 1158.0, "text": "on devices configured for Authenticated Guest Mode,"}, {"start": 1161.0, "text": "and doesn't require additional configuration."}, {"start": 1164.0, "text": "Authentication shouldn't be a barrier, it should be a bridge."}, {"start": 1168.0, "text": "And the best sign-in is the one users don't even have to think about."}, {"start": 1173.0, "text": "These new identity and login capabilities give organizations the flexibility"}, {"start": 1178.0, "text": "to design experiences that feel effortless for users,"}, {"start": 1182.0, "text": "and the confidence that security is assured."}, {"start": 1186.0, "text": "Finally, a quick look at some updates to our education offerings."}, {"start": 1191.0, "text": "I just covered Authenticated Guest Mode for macOS,"}, {"start": 1194.0, "text": "and now I can share that it is also coming to Shared iPad later in this release."}, {"start": 1199.0, "text": "When enabled, iPad boots into a temporary session"}, {"start": 1203.0, "text": "and presents a login screen,"}, {"start": 1205.0, "text": "where users sign in with their Managed Apple Account."}, {"start": 1208.0, "text": "The sign-in can use native authentication or federated authentication"}, {"start": 1212.0, "text": "with an identity provider, with full support for Single Sign-On."}, {"start": 1216.0, "text": "In the temporary session,"}, {"start": 1218.0, "text": "users see their user name in the top-left corner of the screen."}, {"start": 1222.0, "text": "Also, the temporary session shares device capacity with the system,"}, {"start": 1226.0, "text": "with no hard quotas, making use of storage much more flexible."}, {"start": 1230.0, "text": "When they sign out from the lock screen,"}, {"start": 1232.0, "text": "all local data and the Managed Apple Account"}, {"start": 1235.0, "text": "are automatically removed from the device."}, {"start": 1238.0, "text": "This is a great addition to Shared iPad that gives you even more ways to deploy it."}, {"start": 1244.0, "text": "Devices such as iPads and Mac computers"}, {"start": 1247.0, "text": "have become the norm for classroom learning,"}, {"start": 1249.0, "text": "but it's often hard for teachers"}, {"start": 1251.0, "text": "to keep students focused on the task at hand during class."}, {"start": 1255.0, "text": "I am pleased to announce"}, {"start": 1256.0, "text": "a new guided browsing feature in the Classroom app."}, {"start": 1260.0, "text": "Teachers can lock the websites that students can interact with,"}, {"start": 1263.0, "text": "to one or more tabs using Classroom app."}, {"start": 1266.0, "text": "And they can lock students to a single tab for an immediate focal point."}, {"start": 1270.0, "text": "Teachers can configure what websites to use in this mode,"}, {"start": 1274.0, "text": "by directly entering them,"}, {"start": 1275.0, "text": "or by using bookmarks they prepared while planning the class work."}, {"start": 1279.0, "text": "They can limit students ability to navigate inside or outside of websites."}, {"start": 1284.0, "text": "And they can grant access to camera and microphone"}, {"start": 1287.0, "text": "and students have agency over whether they remain enabled."}, {"start": 1291.0, "text": "They can navigate one student or many to the set of chosen web sites."}, {"start": 1295.0, "text": "The student devices open the guided browser"}, {"start": 1298.0, "text": "and show the appropriate websites."}, {"start": 1300.0, "text": "Taken together,"}, {"start": 1301.0, "text": "these capabilities help address a key problem in classrooms today."}, {"start": 1307.0, "text": "So, that's a quick overview of some of the exciting new features,"}, {"start": 1310.0, "text": "available in Apple devices and platforms in this release."}, {"start": 1314.0, "text": "All the device management object schema and documentation"}, {"start": 1318.0, "text": "are available for you right now on the open source GitHub site,"}, {"start": 1321.0, "text": "and developer.apple.com."}, {"start": 1324.0, "text": "Also check out the \"App Attest\" video,"}, {"start": 1327.0, "text": "which provides details on new ways to securely identify enterprise apps."}, {"start": 1332.0, "text": "And finally there's the \"Assessment mode\" video"}, {"start": 1335.0, "text": "for all the new features available to assessment mode app vendors."}, {"start": 1340.0, "text": "The standard for device management is declarative management,"}, {"start": 1343.0, "text": "and with great new Mac hardware and powerful mobile devices,"}, {"start": 1348.0, "text": "combined with the great new device management features in this release,"}, {"start": 1351.0, "text": "you can make it your standard."}, {"start": 1354.0, "text": "You can provide your users with the best in class experience"}, {"start": 1357.0, "text": "everyone expects from Apple devices."}, {"start": 1360.0, "text": "Now's the time for device management vendors,"}, {"start": 1362.0, "text": "and identity providers, to build support for these features,"}, {"start": 1366.0, "text": "so IT administrators can deliver them to users without delay."}, {"start": 1371.0, "text": "Thank you and enjoy the rest of your WWDC."}]}