--- title: "Custom Payload for Mac(macOS)" slug: "custom-payload-for-macos" description: "Get a comprehensive guide on how to create and deploy custom payloads on macOS devices for specialized configurations using Scalefusion. Learn the steps for payload creation, testing, and deployment." tags: ["macOS"] updated: 2023-09-26T15:27:30Z published: 2023-09-26T15:27:30Z canonical: "help.scalefusion.com/custom-payload-for-macos" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt > Use this file to discover all available pages before exploring further. # Custom Payload for Mac(macOS) Configuration profiles streamline the process of setting up a large number of devices. Custom calendar and email settings, network settings (like WiFi and VPN settings), certificates, and device restrictions, are some of the properties you can configure using configuration profiles. Scalefusion provides IT Admins the option of deploying configuration profiles onto the devices. By using the **Custom Settings** feature of a Scalefusion Mac Profile, IT Admins can use a top-notch XML editor and push a Custom Payload directly to the devices. Hence, with this, admins will now be able to add those features for Mac and iOS that are not yet offered under Scalefusion. In this document, we will understand how to configure and push a custom settings payload to the device. ## Prerequisites 1. Understanding of [Apple MDM Protocol](https://developer.apple.com/documentation/devicemanagement). 2. Ability to create XML payloads based on Profiles created using Apple Configurator 2 or as listed [here](https://developer.apple.com/documentation/devicemanagement/toplevel). ## Steps 1. Sign In to Scalefusion and navigate to **Device Profiles**. 2. Select a MacOS device profile and edit or create a new Mac profile to start adding the custom settings. Navigate to **Custom Settings**.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/custom-settings-mac-1.png) 3. **S****end Payload on User Channel:** On Mac, certain payloads need to be applied only at the user level. To apply payload at the user level, enable this setting by toggling it ON. Otherwise, the payloads are sent to the device channel, which is then applied to all users on the device. 4. **Select Conflict Resolution Method:** In case the custom payload that you upload conflicts with the rest of the settings in the Device Profile (like Wifi, Exchange settings etc.), this setting decides which one to use to resolve those conflicts. The options are, 1. **Custom Payload Wins over Device Profile Settings:** The settings in custom payload are given preference over Device Profile. 2. **Device Profiles Wins over Custom Payload:** The settings in Device Profile are given preference over Custom Payload. Select an option based on your payload, If you want to override what is being set from Device Profile, choose **Option** **A** else, choose **Option B.** 5. **Custom Payload:** This is the actual payload editor, and you can either choose to **Type In** your payload or Import an XML file using the **IMPORT FILES**option. 1. **Payload Editor:** Here is an example of a payload for configuring the dock.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/dock-custom-payload-1.png) 2. **Validate:** Once you have entered the payload click on **VALIDATE to**make sure there are no other syntactical/validation issues. 1. **ALL OK:** If the entered payload is all good, a green tick is displayed on the top-right section of the editor.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/dock-custom-payload-2.png) 2. **ERRORS:** If there are errors, then a red cross is displayed on the top-right section of the editor, and the first error will be displayed below the editor,![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/dock-custom-payload-3.png) 6. **Save:** Once you have made the required changes, click on **SAVE**to save the changes and push them to all the devices associated with this profile.You can push more than one payload in the same XML like Wifi and Email ## Custom Properties in Custom Payload [Custom Properties](/docs/using-custom-fields-as-wildcards), defined for devices and users, can also be used in custom payloads. 1. Use $device.custom_property_key or $user.custom_property_key, and they will be replaced with the device or user-specific value.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-08T193444.449.png) 2. You can also use pre-defined keys like $user.email, $user.name, $user.contact_no, $device.imei_no, $device.serial_no, $device.id , $device.name etc.The properties can be used only for the Value/Data fields in the custom payload and not for the Key field. ## Chrome Browser Cloud Management Google's Chrome Browser Cloud Management (CBCM) is a service that allows centralized control over Chrome browser settings and policies on enterprise devices. You can push Chrome browser settings to your managed Mac devices with the help of Custom Payload. ### Step 1: Create the Custom Payload Copy the XML snippet below to a text editor like Notepad++ or to any text editor. ```markup PayloadIdentifier org.example.profile.chrome PayloadRemovalDisallowed PayloadScope System PayloadType Configuration PayloadUUID D3E27DA6-AC75-4342-800E-EA64DBA681E3 PayloadOrganization ORG NAME PayloadVersion 1 PayloadDisplayName Chrome Configuration PayloadContent PayloadType com.google.Chrome PayloadVersion 1 PayloadIdentifier org.example.chromeconfig PayloadUUID 13373056-FC4A-4BF3-894A-B6DB3D90FA58 PayloadEnabled PayloadDisplayName Custom: (com.google.Chrome) CloudManagementEnrollmentToken XXXXXXXXX-XXXXX-XXXX-XXXX-XXXXXXXXX CloudManagementEnrollmentMandatory ``` In the above payload, replace the XXXXXXXXX-XXXXX-XXXX-XXXX-XXXXXXXXX with the enrollment token, which you will get from your Google Workspace Admin Console. 1. In your Google Workspace Admin Console, navigate to **Devices > Chrome > Managed Browsers** > click on **Enrol****l**.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-08T193632.294.png) 2. This will show the **Token** that you will need to enter in the above payload.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-08T193651.712.png) ### Step 2: Add Custom Settings to Device Profile 1. Follow the steps shown above in the **Steps** section to add the custom settings to the device profile, and once the profile is updated, the configuration will be pushed to all managed devices in that profile. 2. Once the custom payload is successfully applied, the Chrome browser will show the **browser settings** as set by you in your **Google Workspace Admin Console**. For example, if you have selected the "Disallow Incognito mode" option in the **User and browser settings**, then the users will not be able to open an Incognito Window in Chrome browser.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-08T193745.037.png)Note: - Please validate these Custom Payloads on a test machine before deploying them on all your managed devices. - Scalefusion has tested these Custom Payloads, however, Scalefusion will not be responsible for any loss of data or system malfunction that may arise due to the incorrect usage of these Custom Payloads. Please contact us at support@scalefusion.com if you have any questions or need support using this feature.[Apple MDM Protocol](https://developer.apple.com/documentation/devicemanagement)