Advanced security options

Security toggles for advanced deployments.

Three optional keys. Most deployments leave them alone. Test on one device first. For the canonical type and default of each, see Configuration keys.

Passkeys on the shared iPad

shared_device_passkeys turns on passkey (FIDO2) mode. Use it only if your sign-in target expects passkeys.

<key>shared_device_passkeys</key>
<true/>

Requires iPadOS 17 or later. No effect on older iPads.

one_time_use_passkeys spends each passkey after one sign-in. Only takes effect when shared_device_passkeys is also on.

<key>shared_device_passkeys</key>
<true/>
<key>one_time_use_passkeys</key>
<true/>

Requires iPadOS 17 or later.

shared_authentication_backend picks the backend protocol. Value is lowercased before reading (Legacy = legacy). Default is legacy.

Change only if IDmelon support tells you to. The wrong value breaks sign-in for the whole device.

<key>shared_authentication_backend</key>
<string>legacy</string>