Federated Apple ID Migration
A guide for transitioning an iCloud account that has been federated to a new email address.
Users can leverage their Google Workspace username and passwords as Managed Apple IDs. They can then use those credentials to sign in to their assigned iPhone, iPad or Mac and even to iCloud on the web.
The new email address must not contain “@friends.tas.edu.au” or “@student.friends.tas.edu.au”
Instructions
The user will have received an email that looks similar to the example below -
Sign into the users “@friends.tas.edu.au” iCloud account at http://www.icloud.com.
If the email address needs to be changed, a window will appear with an email address field.
Keep the tab open, and open Gmail in a new tab.
Create a personal email address (@gmail.com)
Turn on MFA for the new Gmail account, and point it to the users mobile number.
Ensure the user has recorded the username and password.
The Friends' School cannot reset or recover this account if the password is lost.
After ensuring the user has recorded the credentials, record the credentials in 1Password.
Both sets of credentials must be saved in the Vault - The new Gmail account and the iCloud account.
Both sets of credentials are to be saved under the “Service Desk Team” Vault.
The new Google account must have the “Service Accounts” tag in the record.
The iCloud account must have the “Apple IDs” tag in the record.
Once the credentials have been recorded, enter the new Gmail address in the iCloud window.
iCloud will send a verification to the email address.
Copy and paste the code into iCloud, and confirm the change.
If the iCloud account is signed into the users laptop, check the email address has changed in Settings > iCloud. This will happen automatically if the process was successful.
The iCloud account should now be linked to a personal Gmail account, and the @friends.tas.edu.au email address should be available for federation.
FAQ
Does a transfer need to happen if no iCloud data exists?
No, after 60 days the account will be deleted and a new federated account will be created in its place.
What is the process if a user doesn’t want to swap their email address?
The account will be taken over, and the existing data will be deleted. To save the data, the username must be changed.
Can a new iCloud account be created with the @friends.tas.edu.au domain?
A new account cannot be created by the user, as the School is federating these accounts with our Google Directory. Once the new federated accounts are created by the school, the user will be redirected to a Google login page when trying to sign in with a @friends.tas.edu.au account.