Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Use the interactive explorer to search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

LDAP (com.apple.ldap.account)

com.apple.ldap.account

The payload that configures a Lightweight Directory Access Protocol (LDAP) account.

iOS(4.0)macOS(10.7)visionOS(1.1)
Branch: release

Settings (11)

SettingTypeRequiredDefaultManual InstallSupported OS
Account Description
LDAPAccountDescription
The description of the account.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Account Hostname
LDAPAccountHostName
The server's address.
stringrequired
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Account Username
LDAPAccountUserName
The user's user name.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Account Password
LDAPAccountPassword
The user's password. Only use this in encrypted profiles.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Use SSL
LDAPAccountUseSSL
If `true`, the system enables SSL.
booleanoptionaltrue
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
Search Settings
LDAPSearchSettings
An array of search settings dictionaries.
1 subkey
arrayoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─
An LDAP Search Setting
LDAPSearchSettingsItem
3 subkeys
dictionary
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─ └─
Description
LDAPSearchSettingDescription
The description of this search setting.
stringoptional
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─ └─
Search Setting Search Base
LDAPSearchSettingSearchBase
The path to the node where a search should start.
stringrequired
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
└─ └─
Search Setting Scope
LDAPSearchSettingScope
The type of recursion to use in the search: - `LDAPSearchSettingScopeBase`: The search uses only the immediate node that the search base points to. - `LDAPSearchSettingScopeOneLevel`: The search uses the node plus its immediate children. - `LDAPSearchSettingScopeSubtree`: The search uses the node plus all children, regardless of depth.
stringoptionalLDAPSearchSettingScopeSubtree
Yes
iOS (4.0+)macOS (10.7+)visionOS (1.1+)
VPNUUID
VPNUUID
The VPNUUID of the per-app VPN the account uses for network communication. Available in iOS 14 and later.
stringoptional
Yes
iOS (14.0+)