You can read more about Activation Lock on Apple's web site. Supervised mode is used only for corporate-owned devices. Supervised mode can be configured through Apple Configurator to lock down a device and limit functionality to specific business purposes. Supervised devices generate a device-specific Activation Lock bypass code, which is stored on Apple's activation server. To help solve these problems, Apple introduced the ability to disable Activation Lock for supervised devices, without the user's Apple ID and password. You can only reassign devices that don't have Activation Lock enabled. Without the user's Apple ID and password, there's no way to reactivate the device.

The user then leaves the company and returns the device. A user sets up Activation Lock on a device.While Activation Lock helps secure Apple devices and improves the chances of recovering a lost or stolen device, this capability can present you, as an IT admin, with many challenges.

After it's enabled, the user's Apple ID and password must be entered before anyone can: Activation Lock is enabled automatically when a user sets up the Find My iPhone app on a device. Microsoft Intune can help you manage Activation Lock, a feature of the Find My iPhone app for iOS/iPadOS and macOS devices.