Add Cortex XDR app using Apple VPP - Instead of adding the Cortex XDR app directly from the store, use the Apple Volume Purchase Program (VPP) to manage licenses and syncing. - Administrator Guide - 8.9 - 9.1 - Cortex XDR Agent - Cortex XDR - Advanced Endpoint Protection - Cortex - Security Operations

Verify VPP Integration:

1. Go to Tenant administration+Connector and tokens+Apple VPP tokens.

2. Ensure the status of your token is Active.

Add the app in Apple VPP:

1. Log in to your Apple Business Manager (or VPP) portal.

2. Search for and add the Cortex XDR app.

3. Important: When prompted for the quantity, enter a number significantly higher than your current device count (for example, 1000 or 5000) to avoid running out of licenses. If the limit is reached later, you will need to update the quantity and re-sync.

Sync with Intune:

1. Return to the Intune Admin Center.

2. Go to Tenant administration+Connector and tokens+Apple VPP tokens.

3. Select your active token.

4. Scroll to the right to find the options menu (three dots button) and select Sync.

5. Wait 5-10 minutes for the synchronization to complete.

Verify app presence:

1. Go to Apps+iOS/iPadOS.

2. Confirm that Cortex XDR appears in the list with the App type listed as iOS volume purchase program plan.

   Note

   Do not assign the app to groups yet. This will be performed in the final step after all the configurations are ready.