Skip to main content

MacOS: Configure Device Agent for Device Verification

Manage Allowed SSL Server Urls for certificate-based client authentication​

Set AllowedSslServerUrls to enable client authentication on an IDaaS environment. AllowedSslServerUrls is a list of URLs strings separated by comma.

:::info example

https://tenant1.us.ssl.trustedauth.com,https://tenant2.us.ssl.trustedauth.com is a list of URLs to enable client authentication for tenant1 with https://tenant1.us.trustedauth.com and tenant2 with https://tenant2.us.trustedauth.com as instance URL.

:::

Use the following commands to set/get/delete the TLS Server Urls on a Mac:

  • defaults write com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls 'https://tenant1.us.ssl.trustedauth.com,https://tenant2.us.ssl.trustedauth.com'
  • defaults read com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls
  • defaults delete com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls

Manage Allowed Server URLs for certificate-based client authentication​

Set IdaasUrl to define the allowed IDaaS environment. IdaasUrl is a list of URL strings separated by commas. If undefined, the variable includes a default value that supports all domains https://\*.trustedauth.com. However, Entrust recommends defining the value to limit the number of supported instances.

:::info example

https://tenant1.us.trustedauth.com, https://tenant2.us.trustedauth.com are example URLs of tenant1 and tenant2 as allowed servers.

:::

Use the following commands to set/get/delete the allowed Server Urls on a Mac:

  • defaults write com.entrust.identity.mobile.device-agent.service IdaasUrl 'https://tenant1.us.trustedauth.com,https://tenant2.us.trustedauth.com'
  • defaults read com.entrust.identity.mobile.device-agent.service IdaasUrl
  • defaults delete com.entrust.identity.mobile.device-agent.service IdaasUrl