By MacAdmins LatAm, Community Team. Published 2026-06-09. Updated 2026-06-09.
Category: technical
Cyrus Daboo kicked off WWDC26's device management session by declaring what we've all known was coming: Declarative Device Management is no longer the future, it's the standard. If you're managing Apple devices today without using declarative management, you're working harder than you need to. This year's updates prove Apple is doubling down on this architecture with enterprise-grade features that make traditional MDM workflows look dated.
Apple Business: Now in 200+ Countries
Apple Business is a new all-in-one platform combining tools for organizations of all sizes. The expansion to over 200 countries and regions brings zero-touch deployment, Managed Apple Accounts, and built-in device management features to businesses worldwide. This makes it dramatically easier for companies to get started with Apple device management without needing third-party infrastructure on day one.
New APIs for Automation
The Apple Business API now supports creating Blueprints and Configurations, managing users and groups, handling app licenses, and retrieving audit events. These join existing APIs for server/device inventory, device assignment to MDM servers, and AppleCare warranty lookups.
Volume Licensing for Subscriptions
IT can now purchase and manage app subscriptions at scale through Apple Business and Apple School Manager. Deploy subscription apps using the same workflows you already use for free and paid apps, coming later this year.
Declarative Is the Standard
Apple emphasized that declarative management isn't something on the roadmap anymore, it's here, shipping, and running in production fleets around the world. The new features released in macOS 26.4 and iOS/iPadOS 27 prove Apple is building the future of device management on this declarative foundation.
These enhancements were built alongside incredible new Mac hardware: MacBook Neo for K-12 and higher ed, plus performance improvements in the latest MacBook Air and MacBook Pros that excel at demanding AI workflows. Together with declarative management, the Mac isn't just a choice for business and education, it's the choice.
Managed Migration
Switching to a new Mac just got easier. A new declarative configuration deployed right after enrollment gives IT control over which accounts, files, and privacy settings migrate via Migration Assistant. The configuration locks user-facing settings (they just click Continue), and declarative status lets you monitor migration progress across your fleet.
Apple Intelligence & Siri Controls
New declarative configurations for Apple Intelligence, Siri, and keyboard settings shipped in 26.4, with updates in the latest releases providing granular controls for individual Apple Intelligence and Siri features now available to users.
Credential Management
Configuration profiles have limits on credential references, often forcing large profiles and inefficient updates. The declarative many-to-many model changes this: multiple configurations can reference a single credential asset. When you need to refresh a credential, your server only changes the asset, the device updates all configurations automatically.
New configurations include:
com.apple.configuration.security.certificate.root, com.apple.configuration.security.certificate.pem, com.apple.configuration.security.identity.escrow, com.apple.configuration.security.identity.verification, com.apple.configuration.services.configuration-files, com.apple.configuration.services.single-sign-on.kerberos, com.apple.configuration.vpn.alwayson, and DNS settings.
Status Channel Expansion
The status channel removes the need for continuous server polling. New status items include: enrollment type, awaiting device configuration state, Return to Service status, Shared iPad info, current push token, and Lockdown Mode activation state.
Device System Health Monitoring
iOS and iPadOS devices already report hardware issues to users in Settings. Now iOS/iPadOS 27 exposes this same information through a declarative status item for device system health. Components include: baseband, camera, Face ID, Touch ID, and more. IT gets a comprehensive fleet health view to take proactive action and keep users productive.
Enhanced Log Collection
AppleCare can provide customers a link that triggers enhanced log collection. In iOS/iPadOS/tvOS/macOS 27, IT can now start enhanced log collection on organization-owned devices using the TriggerEnhancedLogCollection command. Declarative status helps monitor this process.
Content Caching at Scale
Content Caching reduces bandwidth and speeds up software updates, app installs, and Apple Intelligence content by caching on local Macs. macOS 27 adds a declarative configuration to control Content Caching service and new status items to monitor service health. Content cache servers can now send reports directly to an HTTPS endpoint for sophisticated monitoring consoles.
Declarative App Configuration Comes to macOS
Declarative app configuration (previously iOS/iPadOS/visionOS-only) is now available on macOS 27. This allows secure provisioning of managed apps with credentials and configuration, including hardware-bound keys and Managed Device Attestation for authenticating apps with enterprise services. Encourage your enterprise app developers to adopt the ManagedApp framework.
Package Cleanup
macOS 27 gives IT the option to remove all files and directories installed by a declarative package when the configuration itself is removed. No more leftover data.
Consolidated Privacy Consent
In iOS/iPadOS/macOS 27, a new consolidated privacy prompt appears when an app launches or a website opens in Safari. It shows org name, app name, IT justification, and the app's justification for each permission. Users can Allow (applies defaults, no more prompts) or Not Now (traditional consent flow). The Allow button is clearly highlighted to steer users toward the right choice.
New declarative settings control binary execution using the Endpoint Security framework to allow or deny execution and shut down denied processes. Flexible rules match binaries via code signing properties. An option automatically allows any managed app without needing specific rules.
Privacy controls and binary restrictions are part of new com.apple.configuration.app.settings and com.apple.configuration.safari.settings declarative configurations.
Platform SSO: The Future of Mac Identity
Platform SSO on macOS has evolved significantly over recent releases to simplify setup and support shared workflows. macOS 27 takes Platform SSO even further with a redesigned login experience, required Touch ID enforcement, and web-based authentication flows. For a deeper background, see our earlier deep dive on Platform SSO in macOS 26.
New Login & Unlock Experience
The new login window clearly shows users they're using organizational credentials. IT can now require Touch ID in addition to password entry on organization devices, offering a built-in second factor. This is enforced at login, screen unlock, and FileVault unlock.
Web-Based Authentication
macOS 27 introduces a new web-based authentication option for Platform SSO. Identity providers can now use a secure web view in the login window and screen unlock that runs any modern authentication flow: OTP codes, push notifications for conditional access, QR codes for passwordless sign-in (designed for young learners and shared devices), and more.
The web view operates in a tightly controlled execution context managed by the OS. When scanning QR codes, the camera operates entirely within a secure system process, isolated from the web view. The web page only receives decoded data, never raw camera feed or images. Websites can't capture images of the user or their surroundings.
Web authentication works across login window, screen unlock, and FileVault unlock. Offline authentication is supported to ensure continuity without weakening security on unconnected devices.
Enterprise customization opportunities:
Localized sign-in pages, accessibility-optimized flows, conditional prompting based on device state, seamless integration with existing identity infrastructure.
Developers like Authentik, ClassLink, and Identity Automation are working to enable web-login and QR code support for Platform SSO.
Authenticated Guest Mode with FileVault
Authenticated Guest Mode allows users (e.g., nurses going room-to-room) to quickly log in to a shared Mac in a temporary session. macOS 27 extends this to FileVault-protected Macs, authenticated guest users can now unlock FileVault itself. Full disk encryption is available to protect data on shared devices, ensuring compliance with data protection regulations. This works automatically on devices configured for Authenticated Guest Mode.
Authentication shouldn't be a barrier, it should be a bridge. The best sign-in is the one users don't even have to think about.
The Next Generation of Apple's Platforms
WWDC 2026 introduced major updates across all Apple operating systems. While device management features were extensive, the consumer-facing OS updates were equally impressive, dominated by Siri AI, Apple's next-generation AI assistant built on a revamped Apple Intelligence foundation. Here's what's coming this fall.
iOS 27
Available Fall 2026 • Siri AI beta later in 2026 • apple.com/os/ios
Siri AI: The Star of the Show
Complete redesign with natural language interaction (type or talk), understands personal context across your data, takes actions across multiple apps, and includes a dedicated Siri app for conversation continuity. Initially launching in English with more languages coming.
AI-Powered Photography
Spatial Reframing adjusts composition after capture. Enhanced Clean Up removes unwanted objects. Extend expands photo boundaries. Image Playground generates photorealistic images from text. Visual Intelligence integrates directly into the camera viewfinder via Siri mode, search and ask questions about objects in real time.
Performance Gains
30% faster app launches, 70% faster photo loading in the Photos library, smoother network transitions, more relevant Mail search results.
Child Safety Overhaul
App selection during Setup Assistant, Ask to Browse for website approval, Communication Safety content filters detecting gore/violence, time allowances by content category, redesigned parental controls based on American Academy of Pediatrics recommendations.
Small but Mighty Updates
Consolidated notifications for multiple tapbacks in group messages (finally!), refined Liquid Glass visual adjustments with adjustable tinting, improved Safari extension support with AI-generated extensions from natural language descriptions.
Compatibility: iPhone 11 Pro and later, including new iPhone 17, iPhone Air, and iPhone 17e.
macOS 27 Golden Gate
Available Fall 2026 • Siri AI beta later in 2026 • apple.com/os/macos
Liquid Glass: Enhanced User Control
macOS 27 Golden Gate introduces a Liquid Glass slider in appearance settings, giving users complete control over UI transparency. Adjust from ultra-clear to heavily frosted based on your preferences and working environment. The default setting provides a balanced appearance that works great for most users.
Siri AI with Visual Intelligence
Conversational AI with personal context awareness (finds old photos, emails, notes), app-based actions, Visual Intelligence for on-screen content analysis (screenshot anything and query Siri about images/PDFs), adaptive writing assistance matching user tone, customizable voice (pitch, speed, tone), dedicated Siri app with conversation history.
Safari Gets Smarter
Auto tab grouping by topic, "Notify Me" alerts for price changes/restocks, password vulnerability auto-detection and updating. Plus, AI-generated extensions: describe what you want ("Save and track cooking recipes from around the web"), and Safari creates it.
System Enhancements
Calendar natural language ("Add meeting with Sarah next Tuesday at 3pm"), ultrawide display support (5K at 120Hz with saved arrangements), enhanced Maps Flyover with architectural detail and tree-level rendering, video podcast support (switch between watching/listening), faster AirDrop and network browsing.
Natural Language Shortcuts
Creating powerful automations has never been easier. Just describe what you want: "Send a text to Anna with three kissy emojis." Apple Intelligence generates the shortcut in seconds. No more building complex automation flows, just tell Siri what you want it to do.
Compatibility: MacBook Neo (2026), MacBook Air/Pro with Apple silicon (2020+), iMac (2021+), Mac mini (2020+), Mac Studio (2022+), Mac Pro (2023). Some features require M3+ chips or 12GB+ unified memory.
iPadOS 27
Available Fall 2026 • Siri AI beta later in 2026 • apple.com/os/ipados
Apps Launch 30% Faster
iPadOS 27 optimizes app launches with intelligent preloading and more responsive switching between multiple apps. File transfers to external drives are up to 5x faster, and Wi-Fi/cellular network transitions are noticeably smoother.
Siri AI Integration
Accessible through Spotlight search (automatically knows when you're prompting Siri vs. searching), dedicated Siri app like ChatGPT for conversations, Visual Intelligence with screenshot analysis, cross-app actions (Messages, Music, Reminders), world knowledge integration, customizable voice options.
Apple Pencil Gets Smarter
Enhanced Notes app with handwritten note organization and conversion, Spatial Reframing for photo composition, Extend and Clean Up editing tools in Photos, Image Playground for custom image creation.
HomeKit Secure Video in 4K
HomeKit Secure Video now supports 4K streaming. Plus, AirPods Custom EQ support and enhanced Messages synchronization round out the update.
Compatibility: iPad Pro (M4+), iPad Air (M2+), iPad (A16+), iPad mini (A17 Pro+).
watchOS 27 & visionOS 27
watchOS 27
Siri AI with dedicated app, redesigned "dynamic" app grid, improved health/fitness tracking. Limited support: Series 9+, Ultra 2, Ultra 3, SE 3 only. Apple dropped support for at least three generations of watches, the most aggressive cull yet.
visionOS 27
Siri AI with visual intelligence ("ask about anything in your physical or digital space"), glowing animated Siri orb you can place anywhere on your workspace (it even shines light on nearby surfaces). No EU delay for Siri AI on Vision Pro, unlike iPhone/iPad.
Apple Intelligence prioritizes user privacy at every level. Features run on-device when possible, and when cloud processing is needed, it uses Private Cloud Compute. Apple is working with industry leaders including Nvidia, Google, and Intel to make Private Cloud Compute work on cutting-edge AI hardware, the Apple Foundational Model runs on Nvidia hardware within secure cloud infrastructure, maintaining Apple's privacy-first approach while delivering powerful performance.
Shared iPad & Classroom Enhancements
Authenticated Guest Mode for Shared iPad
Coming later in this release, Authenticated Guest Mode arrives on Shared iPad. iPad boots into a temporary session with a login screen where users sign in with their Managed Apple Account (native or federated auth with SSO support). Users see their name in the top-left, sessions share device capacity with no hard quotas (flexible storage), and all local data + account are removed on sign-out.
Guided Browsing in Classroom App
A new guided browsing feature helps teachers keep students focused during class. Teachers can lock students to one or more website tabs, limit navigation inside/outside sites, and grant camera/microphone access (students control whether they remain enabled). Teachers configure websites by entering URLs or using pre-prepared bookmarks. They can navigate one student or many to chosen sites, and the student devices open the guided browser with appropriate sites.