Update ios-user-enrollment.md

Adding in note that federation is needed for user enrollment

Author: jaye-ren

memdocs/intune/enrollment/ios-user-enrollment.md

@@ -45,6 +45,7 @@ For more information about the options available with User Enrollment, see [User
 - [Apple MDM Push certificate](apple-mdm-push-certificate-get.md)
 - [Managed Apple ID](https://support.apple.com/en-us/HT210737)
 - [iOS 13 or later](https://support.apple.com/en-au/guide/security/sec38eb8731b/web)
+- [Federated Authentication with Apple Business Manager](https://support.apple.com/en-euro/guide/apple-business-manager/welcome/web)
 
 > [!NOTE]
 > Apple released iPadOS in September 2019, which introduced a change that can affect Microsoft Azure Active Directory (Azure AD) and Intune customers who use Conditional Access policies in their organization. For more information about how this affects your policies and what actions to take, see [Evaluate and update Conditional Access policies after new iPadOS release](https://support.microsoft.com/topic/action-required-evaluate-and-update-conditional-access-policies-after-new-ipados-release-23795067-9048-62ad-a5bd-ad63995fc488).  
@@ -55,33 +56,35 @@ For more information about the options available with User Enrollment, see [User
 
 An enrollment profile defines the settings applied to a group of devices during enrollment. 
 
-1. In the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), choose **Devices** > **iOS/iPadOS** > **iOS enrollment** > **Enrollment types (preview)** > **Create profile** > **iOS/iPadOS**. This profile is where you'll indicate what enrollment experience your iOS/iPadOS and iPadOS end users will have on devices not enrolled through a corporate Apple method. If you'd like to make changes, you can edit this profile after you've created it.
+1. Federate your AAD instance with Apple Business Manager or Apple School Manager. For more information, see [Intro to federated authentication with Apple Business Manager](https://support.apple.com/en-euro/guide/apple-business-manager/welcome/web).
+
+2. In the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), choose **Devices** > **iOS/iPadOS** > **iOS enrollment** > **Enrollment types (preview)** > **Create profile** > **iOS/iPadOS**. This profile is where you'll indicate what enrollment experience your iOS/iPadOS and iPadOS end users will have on devices not enrolled through a corporate Apple method. If you'd like to make changes, you can edit this profile after you've created it.
 
     ![Create Apple enrollment profile](./media/ios-user-enrollment/create-profile.png)
 
-2. On the **Basics** page, enter a **Name** and **Description** for the profile for administrative purposes. Users don't see these details. You can use this **Name** field to create a dynamic group in Azure Active Directory. Use the profile name to define the enrollmentProfileName parameter to assign devices with this enrollment profile. Learn more about [Azure Active Directory dynamic groups](/azure/active-directory/active-directory-groups-dynamic-membership-azure-portal#rules-for-devices).
+3. On the **Basics** page, enter a **Name** and **Description** for the profile for administrative purposes. Users don't see these details. You can use this **Name** field to create a dynamic group in Azure Active Directory. Use the profile name to define the enrollmentProfileName parameter to assign devices with this enrollment profile. Learn more about [Azure Active Directory dynamic groups](/azure/active-directory/active-directory-groups-dynamic-membership-azure-portal#rules-for-devices).
 
     ![Basics page](./media/ios-user-enrollment/basics-page.png)
 
-3. Select **Next**.
+4. Select **Next**.
 
-4. On the **Settings** page, select one of the following options for **Enrollment type**:
+5. On the **Settings** page, select one of the following options for **Enrollment type**:
 
     ![Settings page](./media/ios-user-enrollment/settings-page.png)
 
     - **Device enrollment**: All the users in this profile will use Device Enrollment.
     - **User enrollment**: All the users in this profile will use User Enrollment.
     - **Determine based on user choice**: All users in this group will be given the choice of which enrollment type to use. When users enroll their devices, they'll see an option to choose between **I own this device** and **(Company) owns this device**. If they choose the latter, the device will be enrolled by using Device Enrollment. If the user chooses **I own this device**, they'll get another option to secure the entire device or only secure work-related apps and data. The end user's selection of whether they own the device determines which enrollment type is implemented on their device. This user choice is also reflected in the Device Ownership attribute in Intune. To learn more about the user experience, see [Set up iOS/iPadOS device access to your company resources](../user-help/enroll-your-device-in-intune-ios.md).
 
-5. Select **Next**.
+6. Select **Next**.
 
-6. On the **Assignments** page, choose the user groups containing the users to which you want this profile assigned. You can choose to assign the profile to all users or specific groups. All users in the selected groups will use the enrollment type chosen above. Device groups aren't supported for User Enrollment scenarios because the feature is based on user identities, rather than devices. You can choose to assign the profile to all users or specific groups.
+7. On the **Assignments** page, choose the user groups containing the users to which you want this profile assigned. You can choose to assign the profile to all users or specific groups. All users in the selected groups will use the enrollment type chosen above. Device groups aren't supported for User Enrollment scenarios because the feature is based on user identities, rather than devices. You can choose to assign the profile to all users or specific groups.
 
     ![Assignments page](./media/ios-user-enrollment/assignments-page.png)
 
-7. Select **Next**.
+8. Select **Next**.
 
-8. On the **Review and Create** page, review your choices, and then select **Create** to assign the profile to the users.
+9. On the **Review and Create** page, review your choices, and then select **Create** to assign the profile to the users.
 
     ![Assignments page](./media/ios-user-enrollment/assignments-page.png)