Workspace ONE integrates with Apple GitHub to automate DDM

Last year, we added support in Omnissa Workspace ONE^® Unified Endpoint Management (UEM) for Apple declarative device management (DDM) covering both macOS and iOS/iPadOS platforms. That support includes software update enforcement and passcode configuration, among many other configurations. You can read our blogs about DDM support for iOS here and for macOS here. By combining DDM with our new Workspace ONE UEM modern architecture, we’ve helped ensure that the future — and present — of desired state management is bright, indeed. 

Apple GitHub repository 

As we continue with our own efforts, Apple is also busy improving declarative device management. At their Worldwide Developers Conference in June 2025, they announced some additional DDM payloads, providing settings for Safari, Safari Bookmarks and Audio Accessories.  

To help mobile device management (MDM) providers quickly take advantage of upgrades like these, Apple maintains a GitHub repository where they post all their latest DDM declarations. This repository is easier for Apple’s engineers to update, and it makes it easier for us to build custom alerts and pull the latest code. 

New Workspace ONE GitHub integration

In seeking greater efficiencies, we’ve released a direct integration with Apple’s GitHub repository that allows Workspace ONE UEM to programmatically generate payload support by using Apple’s GitHub as the source of truth. Using rendering logic, we’re able to automatically import most of the configurations from Apple’s GitHub repository and plug them directly into our data-driven user interface (DDUI). When combined with our new modern architecture, DDUI allows us to push changes to our customers’ existing environments with little or no need for UEM upgrades. Therefore, bringing new DDM capabilities to our customers faster, ensuring Day 0 configuration support for iOS/iPadOS and macOS. 

This integration is just one more proof point indicative of our dedication to making Apple device management a world-class experience for our Workspace ONE UEM customers. 

Note that this integration will only affect customers on our modern architecture running 2506 patch 3 or greater.  To learn more about modern architecture, please read this Tech Zone article: Workspace ONE UEM Modernization Wave 1. 

We are continuing to add DDM capabilities as quickly as possible, with multiple items on the roadmap that will make work easier for Workspace ONE users. And now going forward, we’ll be using this direct integration that allows Workspace ONE to programmatically generate payload support with Apple’s GitHub as the source of truth.