Enterprise iOS App Distribution, Without the MDM Headache
Internal apps for your own employees: how enterprise certificates work, what Apple requires, and how to install builds over the air without a device-management platform.
What enterprise distribution actually is
The Apple Developer Enterprise Program ($299/year, requires a company with a D-U-N-S number) issues an enterprise certificate that signs apps for internal distribution — no App Store, no device-by-device provisioning, no UDID registration. Any employee iPhone can install the signed IPA over the air.
- Enterprise cert + OTA link: sign once, distribute to everyone. The model this site supports — upload the IPA, share the install link.
- Enterprise cert + MDM: Jamf, Kandji or Intune push the app out and manage it centrally. Powerful, but heavy: servers, agents, licensing.
- Ad-hoc + UDIDs: standard developer account, up to 100 devices per year, each UDID registered in the profile. Cheaper, but manual.
Enterprise vs ad-hoc vs TestFlight
| Enterprise | Ad-hoc | TestFlight | |
|---|---|---|---|
| Cost | $299/yr + D-U-N-S | $99/yr | $99/yr |
| Device registration | None | UDID per device (100/yr) | None (Apple ID invite) |
| Who can install | Your employees | Registered devices | Invited testers |
| Build lifetime | Until certificate expires | Until certificate expires | 90 days |
| Distribution tool needed | Install link or MDM | Install link | App Store Connect |
Ad-hoc device cap: 100 devices per year on the standard program, per Apple's device registration limits.
Distributing to employees without MDM
- Sign the app with your enterprise certificate in Xcode (Distribution → Enterprise export).
- Upload the IPA to Build Installer — metadata is extracted automatically and you get an install link plus QR code.
- Send the link internally (Slack, email, or print the QR on a poster). Employees tap, confirm, and the app installs.
Enterprise cert ready? Ship the build.
Upload IPAFAQ
Is enterprise distribution allowed for external clients?
No — Apple restricts enterprise certificates to your own organization's employees. Distributing to clients' devices requires ad-hoc profiles or TestFlight.
Why does my enterprise app show "Untrusted Developer"?
iOS requires one manual trust step: Settings → General → VPN & Device Management → tap the developer profile → Trust. Every employee does this once.
Do I need MDM to distribute enterprise apps?
No. MDM adds management (remote wipe, compliance, app config), but a plain OTA install link covers distribution. Start with links; add MDM only if you need the management features.