Before you can use Azure AD to enroll your Windows devices, you must configure AirWatch to use Azure AD as an Identity Service. Enabling Azure AD is a two-step process which requires the MDM-enrollment details to be added to Azure. Adding these details provides the Tenant ID and Name details for AirWatch and Azure to sync.


If you are enrolling with a custom domain URL, the domain must be registered with the AirWatch Azure application. This registration requires the creation of a DNS record with your domain services provider. To register your domain, contact AirWatch Professional Services.

You must have a Premium Azure AD subscription to integrate Azure AD with AirWatch. Azure AD integration with AirWatch must be configured at the tenant where Active Directory (such as LDAP) is configured.


If you are setting the Current Setting to Override on the Directory Services system settings page, the LDAP settings must be configured and saved before enabling Azure AD for Identity Services.


To Configure Azure AD for Identity Services:

  1. Navigate to Groups & Settings > All Settings > System > Enterprise Integration > Directory Services.

  2. Enable Use Azure AD for Identity Services under Advanced options.

    Once enabled, take note of the MDM Enrollment and MDM Terms of Use URLs as they are needed when configuring the Azure directory.

  3. Log in to the Azure Management Portal ( with your Microsoft account or organizational account.

  4. Select your directory and navigate to the Mobility (MDM and MAM) tab. This was formerly the Applications tab.
  5. Select Add Application and select the AirWatch by VMware application..


  6. Leave the AirWatch by VMware application on the default settings. Change the MDM user scope to All.

  7. Configure the AirWatch by VMware application by entering the MDM Enrollment URL and MDM Terms of Use URLs from the AirWatch Console. Then configure the Manage devices for these users settings based on your organization rules. Select Save to continue.
  8. Navigate to the Properties tab to find the Azure Directory ID. This was formerly called the Tenant ID.


  9. Select the User Account Details option in the top right corner.

    The Azure Tenant Name is the name of your Azure Directory. You can find the name under the Domain tab.

  10. Return to the AirWatch Console and select Use Azure AD for Identity Services to configure Azure AD Integration.
  11. Enter the Azure Directory ID as the Tenant Identifier. Enter the name of your Azure Directory as the Tenant Name.

  12. Select Save to complete the process.