iosSingleSignOnSettings resource type

Important: APIs under the / beta version in Microsoft Graph are in preview and are subject to change. Use of these APIs in production applications is not supported.

Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

iOS Kerberos authentication settings for single sign-on


Property Type Description
allowedAppsList appListItem collection List of app identifiers that are allowed to use this login. If this field is omitted, the login applies to all applications on the device. This collection can contain a maximum of 500 elements.
allowedUrls String collection List of HTTP URLs that must be matched in order to use this login. With iOS 9.0 or later, a wildcard characters may be used.
displayName String The display name of login settings shown on the receiving device.
kerberosPrincipalName String A Kerberos principal name. If not provided, the user is prompted for one during profile installation.
kerberosRealm String A Kerberos realm name. Case sensitive.



JSON Representation

Here is a JSON representation of the resource.

  "@odata.type": "#microsoft.graph.iosSingleSignOnSettings",
  "allowedAppsList": [
      "@odata.type": "microsoft.graph.appListItem",
      "name": "String",
      "publisher": "String",
      "appStoreUrl": "String",
      "appId": "String"
  "allowedUrls": [
  "displayName": "String",
  "kerberosPrincipalName": "String",
  "kerberosRealm": "String"