The declaration to configure a Lightweight Directory Access Protocol (LDAP) account.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Account name VisibleName The name that apps show to the user for this LDAP account. If not present, the system generates a suitable default. | string | optional | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
Server host name HostName The hostname or IP address of the LDAP server. | string | required | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
Server port Port The port number or IP address of the LDAP server. | integer | optional | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
Authentication credentials asset reference AuthenticationCredentialsAssetReference The identifier of an asset declaration that contains the credentials for this account. Set the corresponding asset type to `CredentialUserNameAndPassword`. | string | optional | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
Search settings SearchSettings The array of nodes to start LDAP searches from. There must be at least one node for this account to be useful. macOS only searches one node and ignores other items in the array. 1 subkey | array | optional | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
└─ An LDAP search setting SearchSettingsItem 3 subkeys | dictionary | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) | |
└─ └─ Visible description VisibleDescription The description of this search setting in the Contacts and Settings apps. If not present, the apps display no name. | string | optional | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
└─ └─ Search base SearchBase The path to the node where a search starts. For example, `ou=people,o=example corp`. | string | required | — | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
└─ └─ Scope Scope The type of recursion to use in the search:
- `Base`: The search uses only the `SearchBase` node.
- `OneLevel`: The search uses the `SearchBase` node and its immediate children.
- `Subtree`: The search uses the `SearchBase` node and all its children, regardless of depth. | string | optional | Subtree | ✓Yes | iOS (15.0+)macOS (13.0+)visionOS (1.1+) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information