> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# MacOS: Configure Device Agent for Device Verification

## Manage Allowed SSL Server Urls for certificate-based client authentication

Set `AllowedSslServerUrls` to enable client authentication on an IDaaS environment. `AllowedSslServerUrls` is a list of URLs strings separated by comma.

example

`https://tenant1.us.ssl.trustedauth.com,https://tenant2.us.ssl.trustedauth.com` is a list of URLs to enable client authentication for tenant1 with `https://tenant1.us.trustedauth.com` and tenant2 with `https://tenant2.us.trustedauth.com` as instance URL.

Use the following commands to `set/get/delete` the TLS Server Urls on a Mac:

- `defaults write com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls 'https://tenant1.us.ssl.trustedauth.com,https://tenant2.us.ssl.trustedauth.com'`
- `defaults read com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls`
- `defaults delete com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls`

## Manage Allowed Server URLs for certificate-based client authentication

Set IdaasUrl to define the allowed IDaaS environment. IdaasUrl is a list of URL strings separated by commas. If undefined, the variable includes a default value that supports all domains `https://\*.trustedauth.com`. However, Entrust recommends defining the value to limit the number of supported instances.

example

`https://tenant1.us.trustedauth.com`, `https://tenant2.us.trustedauth.com` are example URLs of tenant1 and tenant2 as allowed servers.

Use the following commands to `set/get/delete` the allowed Server Urls on a Mac:

- `defaults write com.entrust.identity.mobile.device-agent.service IdaasUrl 'https://tenant1.us.trustedauth.com,https://tenant2.us.trustedauth.com'`
- `defaults read com.entrust.identity.mobile.device-agent.service IdaasUrl`
- `defaults delete com.entrust.identity.mobile.device-agent.service IdaasUrl`