MacOS: Configure Device Agent for Device Verification

Manage Allowed SSL Server Urls for certificate-based client authentication

Set AllowedSslServerUrls to enable client authentication on an IDaaS environment. AllowedSslServerUrls is a list of URLs strings separated by comma.

Example
https://tenant1.us.ssl.trustedauth.com,https://tenant2.us.ssl.trustedauth.com is a list of URLs to enable client authentication for tenant1 with https://tenant1.us.trustedauth.com and tenant2 with https://tenant2.us.trustedauth.com  as instance URL.

Use the following commands to set/get/delete the TLS Server Urls on a Mac:

●       defaults write com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls 'https://tenant1.us.ssl.trustedauth.com,https://tenant2.us.ssl.trustedauth.com'

●        defaults read com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls

●       defaults delete com.entrust.identity.mobile.device-agent.service AllowedSslServerUrls

Manage Allowed Server URLs for certificate-based client authentication

Set IdaasUrl to define the allowed IDaaS environment. IdaasUrl is a list of URL strings separated by commas. If undefined, the variable includes a default value that supports  all domains https://*.trustedauth.com. However, Entrust recommends defining the value to limit the number of supported instances.

For example:

Example
https://tenant1.us.trustedauth.com, https://tenant2.us.trustedauth.com are example URLs of tenant1 and tenant2 as allowed servers.

Use the following commands to set/get/delete the allowed Server Urls on a Mac:

●       defaults write com.entrust.identity.mobile.device-agent.service IdaasUrl 'https://tenant1.us.trustedauth.com,https://tenant2.us.trustedauth.com'

●       defaults read com.entrust.identity.mobile.device-agent.service IdaasUrl

●       defaults delete com.entrust.identity.mobile.device-agent.service IdaasUrl