From a ManageEngine perspective, there is room for improvement regarding the Platform SSO technology introduced by Apple, which allows you to integrate your hardware with your identity providers. It used to be only a few selected ones via OIDC protocols or some other protocols, which are not necessary anymore. If a customer is already using Microsoft 365, they can integrate with any MDM for Platform SSO, which essentially hardens their device identity with the person logging in for the first time. It also helps automate enrollment and provide a zero-touch experience. Currently, while some MDM tools InTune and Jamf support this feature, ManageEngine still does not fully support Platform SSO via Microsoft or Google. I have customers using ManageEngine who are looking forward to this solution, and if ManageEngine can provide it, it would enhance the overall product value. For enterprise users, the solution needs improvement. For SMB, it is straightforward; if it is a small company of 100 to 500 users, anything below 1,000, they do not have much of a compliance or security requirement—they just want to manage their devices and push applications. Simple tasks are easier to accomplish. However, when it comes to enterprise-grade deployment, many complex configurations need to be considered, such as Wi-Fi configurations, network configurations, VPN configurations, and advanced certification deployment, such as ACME certification deployment practice introduced by Apple. These are a few things that can be improved on that side, but from a basic user perspective, if someone is in the SMB market or a company just starting off pre-IPO, without going into compliance, they typically find Zoho and ManageEngine to fit their needs. For enterprise-grade deployments, it is more than enough for Windows, but for Apple, it is still in development and not up to the mark.
