LDAP (com.apple.ldap.account)

com.apple.ldap.account

The payload that configures a Lightweight Directory Access Protocol (LDAP) account.

iOS(4.0)macOS(10.7)visionOS(1.1)
Branch: release

Settings (11)

SettingTypeRequiredDefaultManual InstallSupported OS
Account Description
LDAPAccountDescription
The description of the account.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Account Hostname
LDAPAccountHostName
The server's address.
stringrequired
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Account Username
LDAPAccountUserName
The user's user name.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Account Password
LDAPAccountPassword
The user's password. Only use this in encrypted profiles.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Use SSL
LDAPAccountUseSSL
If `true`, the system enables SSL.
booleanoptionaltrue
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Search Settings
LDAPSearchSettings
An array of search settings dictionaries.
1 subkey
arrayoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─
An LDAP Search Setting
LDAPSearchSettingsItem
3 subkeys
dictionary
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─ └─
Description
LDAPSearchSettingDescription
The description of this search setting.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─ └─
Search Setting Search Base
LDAPSearchSettingSearchBase
The path to the node where a search should start.
stringrequired
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─ └─
Search Setting Scope
LDAPSearchSettingScope
The type of recursion to use in the search: - `LDAPSearchSettingScopeBase`: The search uses only the immediate node that the search base points to. - `LDAPSearchSettingScopeOneLevel`: The search uses the node plus its immediate children. - `LDAPSearchSettingScopeSubtree`: The search uses the node plus all children, regardless of depth.
stringoptionalLDAPSearchSettingScopeSubtree
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
VPNUUID
VPNUUID
The VPNUUID of the per-app VPN the account uses for network communication. Available in iOS 14 and later.
stringoptional
Yes
iOS (14.0+)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managedWi-Fi network configuration
  • com.apple.vpn.managedVPN configuration
  • com.apple.applicationaccessApp and feature restrictions
  • com.apple.security.pkcs1Certificate (PKCS#1) payload
  • com.apple.security.pkcs12Identity certificate (PKCS#12) payload
  • com.apple.security.scepSCEP certificate enrolment
  • com.apple.mail.managedMail account configuration
  • com.apple.eas.accountExchange ActiveSync account
  • com.apple.MCXManaged Client (macOS) preferences
  • com.apple.MCX.FileVault2FileVault 2 disk encryption
  • com.apple.dockmacOS Dock configuration
  • com.apple.screensaverScreensaver configuration
  • com.apple.loginwindowmacOS login window configuration
  • com.apple.systempolicy.managedGatekeeper / system policy
  • com.apple.systempreferencesSystem Preferences pane restrictions
  • com.apple.SoftwareUpdateSoftware update behaviour
  • com.apple.TCC.configuration-profile-policyPrivacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettingsPer-app notification settings
  • com.apple.webcontent-filterWeb content filter
  • com.apple.dnsSettings.managedDNS settings (DoH / DoT)
  • com.apple.relay.managedNetwork relay configuration
  • com.apple.extensiblessoExtensible Single Sign-On
  • com.apple.configuration.passcode.settingsDDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specificDDM: enforced software update
  • com.apple.configuration.services.configuration-filesDDM: service configuration files
  • com.apple.configuration.management.status-subscriptionsDDM: status subscriptions
  • com.apple.activation.simpleDDM: simple activation predicate
  • com.apple.management.organization-infoDDM: organization information