<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic iOS ExtensibleSSO invalid payload error in Endpoint Security</title>
    <link>https://community.cisco.com/t5/endpoint-security/ios-extensiblesso-invalid-payload-error/m-p/5444628#M12966</link>
    <description>&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;I'm trying to use the new iOS 13.0 ExtensibleSingleSignOn payload to get Office 365 URLs in Safari to SSO with Microsoft Authenticator. It's described &lt;A href="https://docs.microsoft.com/en-us/azure/active-directory/develop/apple-sso-plugin#enable-the-sso-extension-with-mobile-device-management-mdm" target="_blank" rel="noopener nofollow noreferrer"&gt;here&lt;/A&gt; in the Microsoft Azure docs. &lt;/P&gt;&lt;P&gt;Anyway I set it all up and checked the values I had with the properties which are &lt;A href="https://developer.apple.com/documentation/devicemanagement/extensiblesinglesignon" target="_blank" rel="noopener nofollow noreferrer"&gt;here&lt;/A&gt; in the Apple Device Management docs.&lt;/P&gt;&lt;P&gt;When I target devices with the profile I get the error "The field 'Type' is invalid" in Meraki (see below)&lt;/P&gt;&lt;P&gt;&lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.PNG" style="width: 999px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.png"&gt;&lt;img src="https://community.cisco.com/t5/image/serverpage/image-id/263127iA6A5AED07741901E/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;The only two type fields in the SSO payload are "Select Extension Type" and "Sign-On Type": &lt;/P&gt;&lt;P&gt;&lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.PNG" style="width: 798px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.png"&gt;&lt;img src="https://community.cisco.com/t5/image/serverpage/image-id/263128iE56744AA1B154CF4/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;But because both fields are pre-defined within Meraki I'm not sure how they can be invalid. And as far as I know I can't download the payload XML to check, either.&lt;/P&gt;&lt;P&gt;I've checked by creating another Meraki payload using Kerberos, but that threw the same response.&lt;/P&gt;&lt;P&gt;I've also searched high and low for more information about this payload on the web but it doesn't seem to be widely adopted as far as I can tell. &lt;/P&gt;&lt;P&gt;Can anyone tell what I'm doing wrong?&lt;/P&gt;&lt;P&gt;Has anyone had experience configuring Extensible SSO with iOS devices using Meraki?&lt;/P&gt;&lt;P&gt;Thanks in advance&lt;/P&gt;</description>
    <pubDate>Sun, 17 May 2020 15:53:56 GMT</pubDate>
    <dc:creator>DSM1</dc:creator>
    <dc:date>2020-05-17T15:53:56Z</dc:date>
    <item>
      <title>iOS ExtensibleSSO invalid payload error</title>
      <link>https://community.cisco.com/t5/endpoint-security/ios-extensiblesso-invalid-payload-error/m-p/5444628#M12966</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;I'm trying to use the new iOS 13.0 ExtensibleSingleSignOn payload to get Office 365 URLs in Safari to SSO with Microsoft Authenticator. It's described &lt;A href="https://docs.microsoft.com/en-us/azure/active-directory/develop/apple-sso-plugin#enable-the-sso-extension-with-mobile-device-management-mdm" target="_blank" rel="noopener nofollow noreferrer"&gt;here&lt;/A&gt; in the Microsoft Azure docs. &lt;/P&gt;&lt;P&gt;Anyway I set it all up and checked the values I had with the properties which are &lt;A href="https://developer.apple.com/documentation/devicemanagement/extensiblesinglesignon" target="_blank" rel="noopener nofollow noreferrer"&gt;here&lt;/A&gt; in the Apple Device Management docs.&lt;/P&gt;&lt;P&gt;When I target devices with the profile I get the error "The field 'Type' is invalid" in Meraki (see below)&lt;/P&gt;&lt;P&gt;&lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.PNG" style="width: 999px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.png"&gt;&lt;img src="https://community.cisco.com/t5/image/serverpage/image-id/263127iA6A5AED07741901E/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;The only two type fields in the SSO payload are "Select Extension Type" and "Sign-On Type": &lt;/P&gt;&lt;P&gt;&lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.PNG" style="width: 798px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.png"&gt;&lt;img src="https://community.cisco.com/t5/image/serverpage/image-id/263128iE56744AA1B154CF4/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;But because both fields are pre-defined within Meraki I'm not sure how they can be invalid. And as far as I know I can't download the payload XML to check, either.&lt;/P&gt;&lt;P&gt;I've checked by creating another Meraki payload using Kerberos, but that threw the same response.&lt;/P&gt;&lt;P&gt;I've also searched high and low for more information about this payload on the web but it doesn't seem to be widely adopted as far as I can tell. &lt;/P&gt;&lt;P&gt;Can anyone tell what I'm doing wrong?&lt;/P&gt;&lt;P&gt;Has anyone had experience configuring Extensible SSO with iOS devices using Meraki?&lt;/P&gt;&lt;P&gt;Thanks in advance&lt;/P&gt;</description>
      <pubDate>Sun, 17 May 2020 15:53:56 GMT</pubDate>
      <guid>https://community.cisco.com/t5/endpoint-security/ios-extensiblesso-invalid-payload-error/m-p/5444628#M12966</guid>
      <dc:creator>DSM1</dc:creator>
      <dc:date>2020-05-17T15:53:56Z</dc:date>
    </item>
    <item>
      <title>Re: iOS ExtensibleSSO invalid payload error</title>
      <link>https://community.cisco.com/t5/endpoint-security/ios-extensiblesso-invalid-payload-error/m-p/5444629#M12967</link>
      <description>I just wanted to say that this issue has fixed itself. Everything is now working as expected.</description>
      <pubDate>Tue, 02 Jun 2020 12:13:52 GMT</pubDate>
      <guid>https://community.cisco.com/t5/endpoint-security/ios-extensiblesso-invalid-payload-error/m-p/5444629#M12967</guid>
      <dc:creator>DSM1</dc:creator>
      <dc:date>2020-06-02T12:13:52Z</dc:date>
    </item>
  </channel>
</rss>

