<!--
{
  "availability" : [
    "iOS: 7.0.0 - 26.0.0",
    "iPadOS: 7.0.0 - 26.0.0",
    "macCatalyst: 7.0.0 - 26.0.0"
  ],
  "documentType" : "symbol",
  "framework" : "DeviceManagement",
  "identifier" : "/documentation/DeviceManagement/SingleSignOn",
  "metadataVersion" : "0.1.0",
  "role" : "Device Management Profile",
  "symbol" : {
    "kind" : "Device Management Profile",
    "modules" : [
      "Device Management"
    ],
    "preciseIdentifier" : "mdm-profiles:SingleSignOn"
  },
  "title" : "SingleSignOn"
}
-->

# SingleSignOn

The payload that configures single sign-on (SSO).

```
object SingleSignOn
```

## Discussion

Specify `com.apple.sso` as the payload type.

Deprecated in iOS 26. Use the [`ExtensibleSingleSignOn`](/documentation/DeviceManagement/ExtensibleSingleSignOn) payload instead.

### Profile availability

|||
|--------------------------|---|
|Device channel            |iOS|
|User channel              |N/A|
|Allow manual install      |iOS|
|Requires supervision      |N/A|
|Requires user-approved MDM|N/A|
|Allowed in user enrollment|iOS|
|Allow multiple payloads   |N/A|

### Profile example

```plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>ExtensionData</key>
            <dict>
                <key>useSiteAutoDiscovery</key>
                <true/>
            </dict>
            <key>ExtensionIdentifier</key>
            <string>com.apple.com</string>
            <key>TeamIdentifier</key>
            <string>RandomTeamID</string>
            <key>Hosts</key>
            <array>
                <string>.com.example.com</string>
            </array>
            <key>Realm</key>
            <string>com.example.com</string>
            <key>Type</key>
            <string>Credential</string>
            <key>PayloadIdentifier</key>
            <string>com.example.myssopayload</string>
            <key>PayloadType</key>
            <string>com.apple.sso</string>
            <key>PayloadUUID</key>
            <string>02cdfc1c-3c53-434d-99db-c55ee62548bd</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>SSO</string>
    <key>PayloadIdentifier</key>
    <string>com.example.myprofile</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>00d92c73-9844-4dc6-b742-eda33efbbf23</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>
```

## Topics

### Objects

[`SingleSignOn.Kerberos`](/documentation/DeviceManagement/SingleSignOn/Kerberos-data.dictionary)

The Kerberos dictionary.



---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)