It's completely impossible for a 60k employee shop too yeah. They also want you to rearrange the azure ad the way Apple wants. Also impossible for us.

And we have like 20k or so users with manually created Apple IDs on their company email and every one of them has to be manually resolved. It's a joke.