Associated Domains device management payload settings for Apple devices

You can manage domains with features, such as Extensible SSO or universal links, for users of a Mac that enrolls in a device management service. Settings are per-user, and the effective settings for a user are the union of payloads that install for the device and the user. Users of a Mac that is unmanaged by a device management service don’t have any effective settings, even from device payloads.

The Associated Domains payload supports the following. For more information, see Payload information.

Supported approval method: Requires user approval.
Supported payload identifier: com.apple.associated-domains
Supported operating systems and channels: macOS device, macOS user.
Supported enrollment methods: User Enrollment, Device Enrollment, Automated Device Enrollment.
Duplicates allowed: True—more than one Associated Domains payload can be delivered to a user or device.

You can use the settings in the table below with the Associated Domains payload.

Setting	Description	Required
App bundle ID	The unique bundle ID for the app.	Yes
Associated domain	The names of the domains.	Yes
Enable direct downloads	Allows the domain to be downloaded directly instead of through a content delivery network (CDN).	No

Note: Each device management service developer implements these settings differently. To learn how various Associated Domains settings are applied to your devices and users, consult your developer’s device management service documentation.

Helpful?

Apple Platform Deployment

Associated Domains device management payload settings for Apple devices