diff --git a/content/manuals/enterprise/security/enforce-sign-in/methods.md b/content/manuals/enterprise/security/enforce-sign-in/methods.md index 3e5e65fe6681..586f99684c58 100644 --- a/content/manuals/enterprise/security/enforce-sign-in/methods.md +++ b/content/manuals/enterprise/security/enforce-sign-in/methods.md @@ -91,17 +91,18 @@ In Docker Desktop version 4.48 and later, the following keys are also supported: - `overrideProxyPAC`: Sets the file path where the PAC file is located. It has precedence over the remote PAC file on the selected proxy. - `overrideProxyEmbeddedPAC`: Sets the content of an in-memory PAC file. It has precedence over `overrideProxyPAC`. -Overriding at least one of the proxy settings via Configuration profiles will automatically lock the settings as they're managed by macOS. +Overriding at least one of the proxy settings via Configuration profiles will automatically lock the settings as they're managed by macOS. -1. Create a file named `docker.mobileconfig` with this content: + +1. Create a file named `docker.mobileconfig` and include the following content: ```xml - - - - - PayloadContent - - + + + + + PayloadContent + + PayloadType com.docker.config PayloadVersion @@ -122,32 +123,46 @@ Overriding at least one of the proxy settings via Configuration profiles will au http://company.proxy:port overrideProxyHTTPS https://company.proxy:port - - - PayloadType - Configuration - PayloadVersion - 1 - PayloadIdentifier - com.yourcompany.docker.config - PayloadUUID - 0deedb64-7dc9-46e5-b6bf-69d64a9561ce - PayloadDisplayName - Docker Desktop Config Profile - PayloadDescription - Config profile to enforce Docker Desktop settings for allowed organizations. - PayloadOrganization - Your Company Name - - + + + PayloadType + Configuration + PayloadVersion + 1 + PayloadIdentifier + com.yourcompany.docker.config + PayloadUUID + 0deedb64-7dc9-46e5-b6bf-69d64a9561ce + PayloadDisplayName + Docker Desktop Config Profile + PayloadDescription + Config profile to enforce Docker Desktop settings for allowed organizations. + PayloadOrganization + Your Company Name + + ``` 1. Replace placeholders: - Change `com.yourcompany.docker.config` to your company identifier - Replace `Your Company Name` with your organization name + - Replace `PayloadUUID` with a randomly generated UUID - Update the `allowedOrgs` value with your organization names (separated by semicolons) - Replace `company.proxy:port` with http/https proxy server host(or IP address) and port 1. Deploy the profile using your MDM solution. -1. Verify the profile appears in **System Settings** > **General** > **Device Management** under **Device (Managed)** profiles. +1. Verify the profile appears in **System Settings** > **General** > **Device Management** under **Device (Managed)**. Ensure the profile is listed with the correct name and settings. + +Some MDM solutions let you specify the payload as a plain dictionary of key-value settings without the full `.mobileconfig` wrapper: + +```xml + + allowedOrgs + first_org;second_org + overrideProxyHTTP + http://company.proxy:port + overrideProxyHTTPS + https://company.proxy:port + +``` ## macOS: plist file method