Configuration Profiles

Jamf Pro Release Notes 11.20.0

Solution
Application
Content Type: Technical Documentation; Release Notes
Utilities & Services
version: 11.20.0
ft:locale: en-US
vrm_version: 11.20.0

Computer Configuration Profiles


Setting	Key Included in Payload	Requirements	Notes
Network Relay
Show toggle in System Settings	`UIToggleEnabled`	macOS 15 or later	You can prevent users from disabling a network relay configuration.
DNS-over-HTTPS-URL	`dnsOverHTTPSURL`	macOS 15 or later	The URL of a DNS-over-HTTPS (DoH) resolver accessible from the relay.
Synthetic DNS answer IPv4 Prefix	`syntheticDNSAnswerIPv4Prefix`	macOS 15.4 or later	An IPv4 address prefix the relay uses to handle address info requests.
Restrictions > Applications
Allow Safari history clearing	`allowSafariHistoryClearing`	macOS 26* or later	You can prevent users from clearing browsing history in Safari.
Allow Safari private browsing	`allowSafariPrivateBrowsing`	macOS 26* or later	You can prevent private browsing in Safari.
Single Sign-On Extensions
Enable registration during setup	`EnableRegistrationDuringSetup`	macOS 26* or later	Activates Platform SSO during Setup Assistant
Create first user during setup	`EnableCreateFirstUserDuringSetup`	macOS 26* or later	Enables creating the first user account on the computer during Setup Assistant.
Access Key	`NewUserAuthenticationMethods`	macOS 26* or later	Access Key is available as an authentication method. The system uses Password and Smart Card if the key is not present.
Access key express mode	`AllowAccessKeyExpressMode`	macOS 26* or later	You can choose to not require authentication before use of an access key.
Group identifier for access key reader	`AccessKeyReaderGroupIdentifier`	macOS 26* or later	The reader group identifier for use with the access key.
Terminal identity for access key	`AccessKeyTerminalIdentityUUID`	macOS 26* or later	The PayloadUUID of an identity payload to use as the Terminal identity of the access key.
Synchronize profile picture	`SynchronizeProfilePicture`	macOS 26* or later	Enables the account's profile picture to be synced with the identity provider.
Device identifiers in attestation	`AllowDeviceIdentifiersInAttestation`	macOS 26* or later	If allowed, the system, includes the device UDID and serial number in Platform SSO attestations.
New User Account Type	`NewUserAuthorizationMode`	macOS 26* or later	"Temporary" is now available from the New User Account Type pop-up menu.

*Feature support is based on testing with the latest Apple beta releases.

Mobile Device Configuration Profiles


Setting	Key Included in Payload	Requirements	Notes
Network Relay
Show toggle in System Settings	`UIToggleEnabled`	iOS 18 or later	You can prevent users from disabling a network relay configuration.
DNS-over-HTTPS-URL	`dnsOverHTTPSURL`	iOS 18 or later	The URL of a DNS-over-HTTPS (DoH) resolver accessible from the relay.
Synthetic DNS answer IPv4 Prefix	`syntheticDNSAnswerIPv4Prefix`	iOS 18.4 or later	An IPv4 address prefix the relay uses to handle address info requests.
Restrictions > Apps
History clearing	`allowSafariHistoryClearing`	iOS 26* or later visionOS 26* or later	You can prevent users from clearing browsing history in Safari.
Private browsing	`allowSafariPrivateBrowsing`	iOS 26* or later visionOS 26* or later	You can prevent private browsing in Safari.
Restrictions > Functionality
Disable iMessage and FaceTime for specified cellular plans	`deniedICCIDsForiMessageFaceTime`	iOS 26* or later	You can prevent the use of iMessage and FaceTime with cellular networks containing matching ICCIDs. You can enter a maximum of four ICCIDs.
Disable RCS messaging for specified cellular plans	`deniedICCIDsForRCS`	iOS 26* or later	You can prevent the use of RCS messaging with cellular networks containing matching ICCIDs. You can enter a maximum of four ICCIDs.
Skip Setup Items
Skip Multitasking	`Multitasking`	iOS 26* or later	When selected, the Multitasking screen is not displayed in Setup Assistant during enrollment. This setting is also available in Devices > PreStage Enrollments.
Skip OS Showcase	`OSShowcase`	iOS 26* or later	When selected, the OS Showcase screen is not displayed in Setup Assistant during enrollment. This setting is also available in Devices > PreStage Enrollments.
Skip Dictation	`SpokenLanguage`	iOS 13 or later	When selected, the Dictation screen is not displayed in Setup Assistant during enrollment. This setting is also available in Devices > PreStage Enrollments. Note: It may not always be possible to skip this screen.
Skip Keyboard	`Keyboard`	iOS 13 or later	When selected, the Keyboard screen is not displayed in Setup Assistant during enrollment. This setting is also available in Devices > PreStage Enrollments. Note: It may not always be possible to skip this screen.

*Feature support is based on testing with the latest Apple beta releases.