Skip to content

Commit 2b55f06

Browse files
committed
Refresh Config Profiles documentation
1 parent 577bf3e commit 2b55f06

File tree

1 file changed

+43
-28
lines changed
  • content/manuals/enterprise/security/enforce-sign-in

1 file changed

+43
-28
lines changed

content/manuals/enterprise/security/enforce-sign-in/methods.md

Lines changed: 43 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -91,17 +91,18 @@ In Docker Desktop version 4.48 and later, the following keys are also supported:
9191
- `overrideProxyPAC`: Sets the file path where the PAC file is located. It has precedence over the remote PAC file on the selected proxy.
9292
- `overrideProxyEmbeddedPAC`: Sets the content of an in-memory PAC file. It has precedence over `overrideProxyPAC`.
9393

94-
Overriding at least one of the proxy settings via Configuration profiles will automatically lock the settings as they're managed by macOS.
94+
Overriding at least one of the proxy settings via Configuration profiles will automatically lock the settings as they're managed by macOS.
9595

96-
1. Create a file named `docker.mobileconfig` with this content:
96+
97+
1. Create a file named `docker.mobileconfig` and include the following content:
9798
```xml
98-
<?xml version="1.0" encoding="UTF-8"?>
99-
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
100-
<plist version="1.0">
101-
<dict>
102-
<key>PayloadContent</key>
103-
<array>
104-
<dict>
99+
<?xml version="1.0" encoding="UTF-8"?>
100+
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
101+
<plist version="1.0">
102+
<dict>
103+
<key>PayloadContent</key>
104+
<array>
105+
<dict>
105106
<key>PayloadType</key>
106107
<string>com.docker.config</string>
107108
<key>PayloadVersion</key>
@@ -122,32 +123,46 @@ Overriding at least one of the proxy settings via Configuration profiles will au
122123
<string>http://company.proxy:port</string>
123124
<key>overrideProxyHTTPS</key>
124125
<string>https://company.proxy:port</string>
125-
</dict>
126-
</array>
127-
<key>PayloadType</key>
128-
<string>Configuration</string>
129-
<key>PayloadVersion</key>
130-
<integer>1</integer>
131-
<key>PayloadIdentifier</key>
132-
<string>com.yourcompany.docker.config</string>
133-
<key>PayloadUUID</key>
134-
<string>0deedb64-7dc9-46e5-b6bf-69d64a9561ce</string>
135-
<key>PayloadDisplayName</key>
136-
<string>Docker Desktop Config Profile</string>
137-
<key>PayloadDescription</key>
138-
<string>Config profile to enforce Docker Desktop settings for allowed organizations.</string>
139-
<key>PayloadOrganization</key>
140-
<string>Your Company Name</string>
141-
</dict>
142-
</plist>
126+
</dict>
127+
</array>
128+
<key>PayloadType</key>
129+
<string>Configuration</string>
130+
<key>PayloadVersion</key>
131+
<integer>1</integer>
132+
<key>PayloadIdentifier</key>
133+
<string>com.yourcompany.docker.config</string>
134+
<key>PayloadUUID</key>
135+
<string>0deedb64-7dc9-46e5-b6bf-69d64a9561ce</string>
136+
<key>PayloadDisplayName</key>
137+
<string>Docker Desktop Config Profile</string>
138+
<key>PayloadDescription</key>
139+
<string>Config profile to enforce Docker Desktop settings for allowed organizations.</string>
140+
<key>PayloadOrganization</key>
141+
<string>Your Company Name</string>
142+
</dict>
143+
</plist>
143144
```
144145
1. Replace placeholders:
145146
- Change `com.yourcompany.docker.config` to your company identifier
146147
- Replace `Your Company Name` with your organization name
148+
- Replace `PayloadUUID` with a randomly generated UUID
147149
- Update the `allowedOrgs` value with your organization names (separated by semicolons)
148150
- Replace `company.proxy:port` with http/https proxy server host(or IP address) and port
149151
1. Deploy the profile using your MDM solution.
150-
1. Verify the profile appears in **System Settings** > **General** > **Device Management** under **Device (Managed)** profiles.
152+
1. Verify the profile appears in **System Settings** > **General** > **Device Management** under **Device (Managed)**. Ensure the profile is listed with the correct name and settings.
153+
154+
Some MDM solutions allow specifying the payload as a plain dictionary of key-value settings without the full `.mobileconfig` wrapper:
155+
156+
```xml
157+
<dict>
158+
<key>allowedOrgs</key>
159+
<string>first_org;second_org</string>
160+
<key>overrideProxyHTTP</key>
161+
<string>http://company.proxy:port</string>
162+
<key>overrideProxyHTTPS</key>
163+
<string>https://company.proxy:port</string>
164+
</dict>
165+
```
151166

152167
## macOS: plist file method
153168

0 commit comments

Comments
 (0)