Renew an Apple app location token without replacing its Intune record

Source facts

Microsoft’s renewal procedure downloads a fresh Apple location token and updates the existing token in Intune. A location token is supported in only one Intune tenant and one device-management solution at a time. Deleting the token also removes its associated apps and assignments. The displayed expiration can take time to reflect a successful renewal. Microsoft Learn.

Applicability

Use this procedure boundary for routine token renewal, not an unplanned migration between management systems. Identify the Apple location and the corresponding existing Intune token before obtaining replacement token material.

DSE recommendation

Make the renewal record point to the existing token object and its app associations. Have the administrator confirm the location with a second reviewer before upload, and protect the downloaded token through the organization’s credential-handling process. Do not delete and recreate the object merely because the expiration display has not refreshed. Escalate a genuine location or tenant mismatch as a separate migration decision.

Verification

Refresh the token view until the updated expiration is observable, then synchronize and compare the associated app and assignment inventory with the pre-renewal record. Validate a representative managed app workflow after renewal. Keep the token contents out of screenshots and tickets; retain object identifiers, dates observed, and the actual synchronization outcome instead.

Official references

Microsoft Learn: Manage Apple Volume-Purchased Apps.