# EducationConfiguration The payload that configures the users, groups, and departments within an educational organization. ``` object EducationConfiguration ``` ## Discussion Specify `com.apple.education` as the payload type. In iOS, send this payload over the device channel. Additionally, the system requires supervision unless the payload only specifies a teacher configuration. In macOS, send this payload over the user channel. The system supports student payloads in macOS 10.14.4 and later. Additionally, ensure: - You configure all identities as both TLS clients and servers - You configure all certificates with a key size of at least 2048 bits - You configure all certificates to use a hashing algorithm of SHA256 or stronger - You configure leader certificates to have the common name prefix “leader”, which is case-insensitive - You configure member certificates to have the common name prefix “member”, which is case-insensitive - You configure TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC to have a validity period greater than 398 days; see [About Upcoming Limits on Trusted Certificates](https://support.apple.com/en-us/HT211025) for more information. ### Profile availability ||| |--------------------------|----------------| |Device channel |iOS, Shared iPad| |User channel |macOS | |Allow manual install |iOS, macOS | |Requires supervision |N/A | |Requires user-approved MDM|N/A | |Allowed in user enrollment|iOS, macOS | |Allow multiple payloads |N/A | ### Profile example ```plist PayloadContent Password Password123 PayloadCertificateFileName TestServerCert.p12 PayloadContent ExampleD PayloadDescription Adds a PKCS#12-formatted certificate PayloadDisplayName LeaderIdentity.p12 PayloadIdentifier com.example.myedconfigpayload PayloadType com.apple.security.pkcs12 PayloadUUID c149dafb-033f-4894-8add-e1056dc1c420 PayloadVersion 1 PayloadCertificateFileName Cert.cer PayloadContent ExampleD PayloadDescription Adds a CA root certificate PayloadDisplayName leader: Catalyst Certificate PayloadIdentifier com.example.mycertpayload PayloadType com.apple.security.root PayloadUUID 0391e29c-f10d-4803-a749-d04ef7f6a8fa PayloadVersion 1 OrganizationUUID 24A9D6AC-9C34-45F3-B92F-88C4657204C9 OrganizationName Example Inc. PayloadCertificateUUID 8DBA6415-6F70-47FE-B0D2-C70B3D35B7A3 LeaderPayloadCertificateAnchorUUID c2113db2-8ea9-456d-a2e7-e19f4a706b75 MemberPayloadCertificateAnchorUUID 82c3100d-e22c-42db-b70b-3b628992c757 Departments Name Phonetics Identifier NotNeeded GroupBeaconIDs 1 2 3 Groups BeaconID 1 Name Phonetic Info Provided LeaderIdentifiers can MemberIdentifiers juan mei tom bill Users Identifier tom Name tom clark GivenName tom FamilyName clark PhoneticGivenName tom PhoneticFamilyName clark AppleID tom ImageURL https://url.example.com.jpg PasscodeType four Identifier Juan Name Juan Chavez GivenName Juan FamilyName Chavez PhoneticGivenName Juan PhoneticFamilyName Chavez AppleID Juan ImageURL https://url.example.com.jpg2 PasscodeType four Identifier mei Name mei chen GivenName mei FamilyName chen PhoneticGivenName Mei PhoneticFamilyName Chen AppleID mei ImageURL https://url.example.com.jpg.3 PasscodeType six Identifier bill Name bill james GivenName bill FamilyName james PhoneticGivenName Bill PhoneticFamilyName James AppleID bill ImageURL https://url.example.com.jpg.4 PasscodeType complex PayloadDescription Configures the Shared iPad loginwindow. PayloadDisplayName Shared iPad PayloadIdentifier com.example.myedconfigpayload PayloadType com.apple.education PayloadUUID 9AD88C7B-7478-44D0-BEDD-4B1709002916 PayloadVersion 1 PayloadDisplayName Education PayloadIdentifier com.example.myprofile PayloadType Configuration PayloadUUID 2E4F6563-21DE-499B-B834-4BCF1F08B5AD3 PayloadVersion 1 ``` ## Topics ### Objects [`EducationConfiguration.DepartmentsItem`](/documentation/DeviceManagement/EducationConfiguration/DepartmentsItem) A department in the organization. [`EducationConfiguration.DeviceGroupsItem`](/documentation/DeviceManagement/EducationConfiguration/DeviceGroupsItem) A device group in the organization. [`EducationConfiguration.GroupsItem`](/documentation/DeviceManagement/EducationConfiguration/GroupsItem) An array of dictionaries defining groups. [`EducationConfiguration.UsersItem`](/documentation/DeviceManagement/EducationConfiguration/UsersItem) A user in the organization. --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)