ExtensibleSSOPlatformSSOObject

Settings for Access Key authentication.

Account display and profile settings.

A dictionary with keys and values that are strings. The keys are HTTP header names, and the values are HTTP header values. The device adds these headers to nonce, pre-authentication, login, key and key exchange requests for Platform SSO. The device limits the number of headers to 20, the length of the header name to 128 characters, and the length of the header value to 2048 characters.

Available: macOS 27.2+

If true, the system includes the device UDID and serial number in Platform SSO attestations.

The Platform SSO authentication method to use with the extension. Requires that the SSO Extension also support the method.

Settings for authorization prompts and group management.

The duration, in seconds, until the system requires a full login instead of a refresh. The default value is 64,800 (18 hours). The minimum value is 3600 (1 hour).

Policies for login, unlock, and FileVault behavior.

The token this device uses for registration with Platform SSO. Use it for silent registration with the Identity Provider. Requires that AuthenticationMethod in PlatformSSO isn’t empty.

Settings for creating new users via Platform SSO.

If true, the system uses the same signing and encryption keys for all users.

Allowed scopes: system

Settings for web authentication behavior.