# Domains The payload that configures the domains under an organization’s management. ``` object Domains ``` ## Discussion Specify `com.apple.domains` as the payload type. The `WebDomains`, `SafariPasswordAutoFillDomains`, and `CrossSiteTrackingPreventionRelaxedDomains` keys are arrays containing strings that use the following matching patterns: - `example.com`: Any path under `example.com` matches, but not `site.example.com`. - `foo.example.com`: Any path under `foo.example.com` matches, but not `example.com` or `bar.example.com`. - `\*.example.com`: Any path under `foo.example.com` or `bar.example.com` matches, but not `example.com`. - `example.com/sub`: `example.com/sub` and any path under it matches, but not `example.com`. - `foo.example.com/sub`: Any path under `foo.example.com/sub` matches, but not `example.com`, `example.com/sub`, `foo.example.com/`, or `bar.example.com/sub`. - `\*.example.com/sub`: Any path under `foo.example.com/sub` or `bar.example.com/sub` matches, but not `example.com` or `foo.example.com/`. - `\*.co`: Any path under `example.co` or `betterbag.co` matches, but not `example.co.uk` or `example.com`. A URL that begins with the prefix `www.` is treated as though it doesn’t contain that prefix during matching. For example, `http://www.example.com/store` is matched as `http://example.com/store`. Trailing slashes are ignored. If a domain string contains a port number, the system considers only addresses that specify that port number managed. Otherwise, the system matches the domain without regard to the port number specified. For example, the pattern `\*.example.com:8080` matches `http://site.example.com:8080/page.html` but not `http://site.example.com/page.html`, while the pattern `\*.example.com` matches both URLs. ### Profile availability ||| |--------------------------|---------------------------------| |Device channel |iOS, macOS, Shared iPad, visionOS| |User channel |macOS, Shared iPad | |Allow manual install |iOS, macOS, visionOS | |Requires supervision |N/A | |Requires user-approved MDM|N/A | |Allowed in user enrollment|N/A | |Allow multiple payloads |N/A | ### Profile example ```plist PayloadContent EmailDomains example.com SafariPasswordAutoFillDomains example.com WebDomains example.com PayloadIdentifier com.example.mysafaridomainspayload PayloadType com.apple.domains PayloadUUID 0f94e664-4c36-4637-b264-19a533adc8e1 PayloadVersion 1 PayloadDisplayName Domains PayloadIdentifier com.example.myprofile PayloadType Configuration PayloadUUID 0cf6d95f-8e9f-49f3-9cba-c5e78de5430e PayloadVersion 1 ``` --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)