# ExtensibleSingleSignOn The payload that configures an app extension that performs single sign-on (SSO). ``` object ExtensibleSingleSignOn ``` ## Discussion Specify `com.apple.extensiblesso` as the payload type. The system supports user channel installation in macOS 11 and later. ### Profile availability ||| |--------------------------|---------------------------------| |Device channel |iOS, macOS, visionOS | |User channel |macOS, Shared iPad | |Allow manual install |N/A | |Requires supervision |N/A | |Requires user-approved MDM|macOS | |Allowed in user enrollment|iOS, macOS, visionOS | |Allow multiple payloads |iOS, macOS, Shared iPad, visionOS| ### Profile example ```plist PayloadContent ExtensionData useSiteAutoDiscovery ExtensionIdentifier com.example.com TeamIdentifier RandomTeamID Hosts .com.example.com Realm COM.URL.COM Type Credential PayloadIdentifier com.example.myessopayload PayloadType com.apple.extensiblesso PayloadUUID dbed949d-39a2-440d-a84b-e0c825cdcb2e PayloadVersion 1 PayloadDisplayName Extensible SSO PayloadIdentifier com.example.myprofile PayloadType Configuration PayloadUUID da3bbbec-a753-4aa7-aeae-a74b7a65c0b5 PayloadVersion 1 ``` ## Topics ### Objects [`ExtensibleSingleSignOn.ExtensionData`](/documentation/DeviceManagement/ExtensibleSingleSignOn/ExtensionData-data.dictionary) The additional data to pass to the app extension. [`ExtensibleSingleSignOn.PlatformSSO`](/documentation/DeviceManagement/ExtensibleSingleSignOn/PlatformSSO-data.dictionary) The dictionary to configure Platform SSO. Requires setting `Type` to `Redirect`. --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)