🎸 Enroll personally owned (BYOD) iOS/iPadOS devices with work account

[marko-lisica]

Goal

User story
As an IT admin,
I want my end users to enroll their personal iPhones and iPads through the Settings app by signing in with an IdP account
so that I can enforce settings necessary to access organization resources/tools.

Key result

Account-based user enrollment for personal Apple devices (BYOD)

Original requests

#19329

Context

• Product Designer: @marko-lisica

Changes

Product

• UI changes: Figma link
• CLI (fleetctl) usage changes: TODO
• YAML changes: TODO
• REST API changes: TODO
• Fleet's agent (fleetd) changes: TODO
• GitOps mode changes: TODO
• Activity changes: TODO
• Permissions changes: TODO
• Changes to paid features or tiers: TODO
• Transparency changes: TODO
• First draft of test plan added
• Other reference documentation changes: TODO
• Once shipped, requester has been notified
• Once shipped, dogfooding issue has been filed

Engineering

• Test plan is finalized
• Contributor API changes: TODO
• Feature guide changes: TODO
• Database schema migrations: TODO
• Load testing: TODO

ℹ️  Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

QA

Risk assessment

• Requires load testing: TODO
• Risk level: Low / High TODO
• Risk description: TODO

Test plan

Make sure to go through the list and consider all events that might be related to this story, so we catch edge cases earlier.

1. Step 1
2. Step 2
3. Step 3

Testing notes

Confirmation

1. Engineer: Added comment to user story confirming successful completion of test plan.
2. QA: Added comment to user story confirming successful completion of test plan.