SuperOps provides a structured way to remove Mobile Device Management (MDM) configurations. This functionality is essential when offboarding a client, rebuilding an MDM environment, or correcting a configuration setup.
You can choose to delete an entire client configuration (which removes both Android and Apple setups) or delete specific components individually.
Warning: Deleting MDM configurations is generally irreversible. It will stop device management, remove associated assets, and revoke licenses. Please review the impact warnings on the confirmation screens carefully before proceeding.
Deleting an entire client configuration
Deleting a client configuration removes all Android and Apple MDM integrations, policies, and associated assets for that client. This action cannot be undone.
Navigate to the MDM Configurations page to view your existing client configurations.
To delete a client directly from the list, click the Delete button next to the client name. A confirmation dialog will appear detailing the impact.
Alternatively, click on the client's name to view their configuration details. Click the Delete Client Configuration button in the top right corner.
Review the Delete Client Configuration popup. This will permanently delete all Android and Apple configurations along with the associated assets. This action is irreversible and a list of all impacted assets, configuration and licenses. Click Delete permanently to confirm.
Deleting Android Configurations
You can remove the Android Enterprise connection without affecting Apple configurations. This is often done during tenant migration or if the wrong Google account was connected.
Open the client's MDM configuration and switch to the Android tab.
Click the three-dot menu icon next to the Enterprise ID details and select Delete Android Enterprise ID.
Review the confirmation screen. This action will remove all Android devices from management and stop all policies. Click Delete Android Enterprise to confirm.
Deleting Apple Configurations
In certain scenarios, you may need to delete specific Apple MDM configurations instead of removing the entire setup.
Tokens were created using the wrong Apple ID
Automated Device Enrollment was mapped to the wrong Apple Business Manager account
Apps and Books was connected to the wrong location
A specific Apple integration needs to be reset without deleting the entire MDM setup
An individual configuration is misconfigured and needs a clean re setup
You can delete specific components like the APNs certificate, Automated Device Enrollment (ADE), or Apps and Books integrations.
To access these options:
Open the client's MDM configuration and switch to the Apple tab.
Click the three-dot menu icon to view the deletion options.
Delete APNs Certificate
Deleting the Apple Push Notification service (APNs) certificate immediately stops communication with Apple devices. Devices remain enrolled but become unmanaged.
Select Delete APNs from the menu. Review the impact on the confirmation screen and click Delete APNs.
Delete Automated Device Enrollment (ADE)
This removes the ADE configuration from SuperOps. Note that the profile must also be deleted in the Apple Business Manager (ABM) portal to be fully removed.
Select Delete Automated Device Enrollment from the menu and click Delete ADE.
Delete Apps and Books
Deleting this integration revokes all VPP licenses assigned through Apple. Managed apps may be removed from devices, but the MDM enrollment itself remains intact.
Select Delete Apps and Books from the menu. Confirm the action by clicking Delete Apps and Books.
Summary
Managing the lifecycle of your MDM configurations is critical for security and asset accuracy. Whether you are offboarding a client or restructuring your setup, it is important to clearly understand the impact of deletion, especially on device communication and license revocation, before confirming these irreversible actions.
SuperOps is designed with a structured and transparent offboarding approach, ensuring that deletions are deliberate, clearly communicated, and secure. This helps you maintain clean tenant hygiene, protect client data, and confidently manage transitions without leaving residual access or configurations behind.