Setup guide · from scratch

Download the Apple location (VPP content) token from ABM

The .vpptoken lets Intune push App Store apps silently with no personal Apple ID. It lives in ABM under Payments and Billing > Content Tokens. One token per Location, per MDM; valid 12 months — diarise renewal.

one-time human step · Apple Business Manager (business.apple.com)assisted guide — Decolla walks you through this

This is a one-time human step. It runs through Apple Business Manager (business.apple.com), which requires an interactive sign-in no MDM or API can perform for you. Decolla keeps it frictionless: the wizard shows these exact steps at the moment you need them, and flags what to bring back (a token, a file, an ID).

Step 1. Sign in to https://business.apple.com/ as an Administrator.

Screenshot: ABM signed in showing the org name (captured during a live customer build — coming to this page)

Step 2. Add a payment method: click your account name (lower-left) > Preferences > Payments and Billing, and add a card (required even for free apps on first acquisition).

Screenshot: Payments and Billing payment-method screen (captured during a live customer build — coming to this page)

Step 3. Confirm or create your Location under Settings > Locations — each MDM needs its own Location/token, never shared.

Screenshot: Locations list showing the dedicated Location (captured during a live customer build — coming to this page)

Step 4. Go back to account name > Preferences > Payments and Billing; the Apps and Books tab is usually already selected.

Screenshot: Payments and Billing > Apps and Books tab (captured during a live customer build — coming to this page)

Step 5. Scroll to the 'Content Tokens' section on the right.

Screenshot: Content Tokens section (captured during a live customer build — coming to this page)

Step 6. Next to the Location this Intune tenant will own, click 'Download'.

Screenshot: 'Download' button beside the correct Location (captured during a live customer build — coming to this page)

Step 7. Save the .vpptoken file securely and note the associated Apple ID email — this is what you upload to Intune.

Screenshot: Saved .vpptoken with the Apple ID email visible (captured during a live customer build — coming to this page)

See it on a real device.

Decolla is in private build — early-access members see a build defined, deployed and rolled back first.

Get early access