topic Re: Variables not working correctly in Endpoint Security

Variables not working correctly

vassallon — Tue, 21 Jan 2020 21:29:41 GMT

Has anyone tried doing this within Meraki?

https://documentation.meraki.com/SM/Profiles_and_Settings/Variables_in_Custom_Apple_Profiles_with_Systems_Manager

We are trying to get our Content Filtering solution to utilize the owner that is identified within Meraki to pass through so users do not need to authenticate.

Here is the string we have built while working with Securly.

https://www.securly.com/smart.pac?fid=xxxxxxxx@eaglepnt.k12.or.us&user=$OWNERUSERNAME@STU.EAGLEPNT.K12.OR.US

However, when I look on the iPad I do not see the actual owner name is being pushed to the device.

I do have an open case with support already, but it's gone to development for further research. I thought I would see if anyone has tried getting the variables to work like this as they work fine for this.

Re: Variables not working correctly

seshu1992 — Wed, 22 Jan 2020 17:48:24 GMT

Hello @vassallon

Thank you for sharing the details. Looks like this is something that needs to be investigated by our internal teams. Please do share any update you receive on this thread so that we keep the community upto date.

Let me know if you have any questions.

Regards,

Meraki Team

Re: Variables not working correctly

vassallon — Mon, 27 Jan 2020 16:24:24 GMT

@seshu1992

Support has given me an answer so far of that variables are supported in this method for setting up Proxy Pac files, which doesn't quite seem right as variables "should" be able to return data whenever they are called.

I have also opened a case with Apple Enterprise support to see what they have to say on the matter.

I would think if other MDMs can do this functionality then Meraki should be able to as well.

Re: Variables not working correctly

beks88 — Tue, 04 Feb 2020 23:15:38 GMT

Variables already worked for our profiles, see this thread https://community.meraki.com/t5/Endpoint-Management-Systems/Exchange-online-Microsoft-Office-365-not-working-when-pushed/m-p/71184/highlight/true#M6164

But we are facing here another issue with custom profiles

Re: Variables not working correctly

vassallon — Tue, 11 Feb 2020 22:55:43 GMT

So the fix to getting this to work was to create a custom Apple profile through Apple Configurator 2. Once I added this line into the Global HTTP Proxy section under the Proxy PAC URL, Meraki was then able to insert the correct owner username into the string.

https://www.securly.com/smart.pac?fid=xxxxxxxx@eaglepnt.k12.or.us&user=$OWNERUSERNAME@STU.EAGLEPNT.K12.OR.US

Re: Variables not working correctly

rossbryant — Wed, 07 Apr 2021 16:19:29 GMT

Hi @vassallon,

Would you be able to explain that a little further or provide a screenshot from Apple Configurator? We are going through this now with Securly. Does this fix require each device to be reprovisioned with Apple Configurator?

Thank you.

Re: Variables not working correctly

m_lingenfelter — Thu, 08 Apr 2021 17:27:22 GMT

I am currently working on this exact issue in a trial of Securly and I am getting the same issue and Securly support and I just seem to be going round and round. I have the following URL in my PAC URL:

https://useast2-www.securly.com/smart.pac?fid=[REDACTED _account _URL]&user=$OWNERUSERNAME@blwd.k12.pa.us

I cannot get the user name to resolve in Securly.

Was there another element that you added to the profile/setting that pushed this data to the iPad so that Securly could pull it and resolve the name (email) of the user?

Re: Variables not working correctly

vassallon — Thu, 08 Apr 2021 17:55:59 GMT

@m_lingenfelter and @rossbryant

Here is what I created for a profile in Apple Configurator 2.

AC2 Global HTTP Proxy

This is the string I use but sanitized.

https://www.securly.com/smart.pac?fid=xxxxx@eaglepnt.k12.or.us&user=$OWNERUSERNAME@stu.eaglepnt.k12.or.us

I then upload the created profile into Meraki and have it push out to student devices.

Securly Profile

When Meraki pushes it onto the device is when the variable is sorted out and injected into the string that ends up on the iPad.

iPad Proxy Setting

Please if you have any questions feel free to reach out to me.