Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Use the interactive explorer to search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
The declaration to configure the device to allow WebAuthn enterprise attestation for certain passkeys.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Attestation identity asset reference. AttestationIdentityAssetReference The identifier of an asset declaration that contains the identity to install and use for passkey attestation. | string | required | — | ✓Yes | iOS (17.0+)macOS (14.0+) |
Attestation identity key is extractable AttestationIdentityKeyIsExtractable If `true`, the private key for the attestation identity is extractable in the keychain. | boolean | optional | true | ✗No | |
Relying parties RelyingParties An array of the relying parties to allow enterprise attestation. 1 subkey | array | required | — | ✓Yes | iOS (17.0+)macOS (14.0+) |
└─ Relying party RelyingParty | string | — | ✓Yes | iOS (17.0+)macOS (14.0+) |
