Class MacOSKerberosSingleSignOnExtension.Builder

    • Method Detail

      • activeDirectorySiteCode

        public MacOSKerberosSingleSignOnExtension.Builder activeDirectorySiteCode​(String activeDirectorySiteCode)
        “Gets or sets the Active Directory site.”
        Parameters:
        activeDirectorySiteCode - value of activeDirectorySiteCode property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • blockActiveDirectorySiteAutoDiscovery

        public MacOSKerberosSingleSignOnExtension.Builder blockActiveDirectorySiteAutoDiscovery​(Boolean blockActiveDirectorySiteAutoDiscovery)
        “Enables or disables whether the Kerberos extension can automatically determine its site name.”
        Parameters:
        blockActiveDirectorySiteAutoDiscovery - value of blockActiveDirectorySiteAutoDiscovery property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • blockAutomaticLogin

        public MacOSKerberosSingleSignOnExtension.Builder blockAutomaticLogin​(Boolean blockAutomaticLogin)
        “Enables or disables Keychain usage.”
        Parameters:
        blockAutomaticLogin - value of blockAutomaticLogin property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • cacheName

        public MacOSKerberosSingleSignOnExtension.Builder cacheName​(String cacheName)
        “Gets or sets the Generic Security Services name of the Kerberos cache to use for this profile.”
        Parameters:
        cacheName - value of cacheName property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • credentialBundleIdAccessControlList

        public MacOSKerberosSingleSignOnExtension.Builder credentialBundleIdAccessControlList​(List<String> credentialBundleIdAccessControlList)
        “Gets or sets a list of app Bundle IDs allowed to access the Kerberos Ticket Granting Ticket.”
        Parameters:
        credentialBundleIdAccessControlList - value of credentialBundleIdAccessControlList property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • credentialBundleIdAccessControlList

        public MacOSKerberosSingleSignOnExtension.Builder credentialBundleIdAccessControlList​(String... credentialBundleIdAccessControlList)
        “Gets or sets a list of app Bundle IDs allowed to access the Kerberos Ticket Granting Ticket.”
        Parameters:
        credentialBundleIdAccessControlList - value of credentialBundleIdAccessControlList property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • credentialBundleIdAccessControlListNextLink

        public MacOSKerberosSingleSignOnExtension.Builder credentialBundleIdAccessControlListNextLink​(String credentialBundleIdAccessControlListNextLink)
        “Gets or sets a list of app Bundle IDs allowed to access the Kerberos Ticket Granting Ticket.”
        Parameters:
        credentialBundleIdAccessControlListNextLink - value of credentialBundleIdAccessControlList@nextLink property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • credentialsCacheMonitored

        public MacOSKerberosSingleSignOnExtension.Builder credentialsCacheMonitored​(Boolean credentialsCacheMonitored)
        “When set to True, the credential is requested on the next matching Kerberos challenge or network state change. When the credential is expired or missing, a new credential is created. Available for devices running macOS versions 12 and later.”
        Parameters:
        credentialsCacheMonitored - value of credentialsCacheMonitored property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • domainRealms

        public MacOSKerberosSingleSignOnExtension.Builder domainRealms​(List<String> domainRealms)
        “Gets or sets a list of realms for custom domain-realm mapping. Realms are case sensitive.”
        Parameters:
        domainRealms - value of domainRealms property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • domainRealms

        public MacOSKerberosSingleSignOnExtension.Builder domainRealms​(String... domainRealms)
        “Gets or sets a list of realms for custom domain-realm mapping. Realms are case sensitive.”
        Parameters:
        domainRealms - value of domainRealms property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • domainRealmsNextLink

        public MacOSKerberosSingleSignOnExtension.Builder domainRealmsNextLink​(String domainRealmsNextLink)
        “Gets or sets a list of realms for custom domain-realm mapping. Realms are case sensitive.”
        Parameters:
        domainRealmsNextLink - value of domainRealms@nextLink property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • domains

        public MacOSKerberosSingleSignOnExtension.Builder domains​(List<String> domains)
        “Gets or sets a list of hosts or domain names for which the app extension performs SSO.”
        Parameters:
        domains - value of domains property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • domains

        public MacOSKerberosSingleSignOnExtension.Builder domains​(String... domains)
        “Gets or sets a list of hosts or domain names for which the app extension performs SSO.”
        Parameters:
        domains - value of domains property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • domainsNextLink

        public MacOSKerberosSingleSignOnExtension.Builder domainsNextLink​(String domainsNextLink)
        “Gets or sets a list of hosts or domain names for which the app extension performs SSO.”
        Parameters:
        domainsNextLink - value of domains@nextLink property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • isDefaultRealm

        public MacOSKerberosSingleSignOnExtension.Builder isDefaultRealm​(Boolean isDefaultRealm)
        “When true, this profile's realm will be selected as the default. Necessary if multiple Kerberos-type profiles are configured.”
        Parameters:
        isDefaultRealm - value of isDefaultRealm property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • kerberosAppsInBundleIdACLIncluded

        public MacOSKerberosSingleSignOnExtension.Builder kerberosAppsInBundleIdACLIncluded​(Boolean kerberosAppsInBundleIdACLIncluded)
        “When set to True, the Kerberos extension allows any apps entered with the app bundle ID, managed apps, and standard Kerberos utilities, such as TicketViewer and klist, to access and use the credential. Available for devices running macOS versions 12 and later.”
        Parameters:
        kerberosAppsInBundleIdACLIncluded - value of kerberosAppsInBundleIdACLIncluded property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • managedAppsInBundleIdACLIncluded

        public MacOSKerberosSingleSignOnExtension.Builder managedAppsInBundleIdACLIncluded​(Boolean managedAppsInBundleIdACLIncluded)
        “When set to True, the Kerberos extension allows managed apps, and any apps entered with the app bundle ID to access the credential. When set to False, the Kerberos extension allows all apps to access the credential. Available for devices running iOS and iPadOS versions 14 and later.”
        Parameters:
        managedAppsInBundleIdACLIncluded - value of managedAppsInBundleIdACLIncluded property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • modeCredentialUsed

        public MacOSKerberosSingleSignOnExtension.Builder modeCredentialUsed​(String modeCredentialUsed)
        “Select how other processes use the Kerberos Extension credential.”
        Parameters:
        modeCredentialUsed - value of modeCredentialUsed property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordBlockModification

        public MacOSKerberosSingleSignOnExtension.Builder passwordBlockModification​(Boolean passwordBlockModification)
        “Enables or disables password changes.”
        Parameters:
        passwordBlockModification - value of passwordBlockModification property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordChangeUrl

        public MacOSKerberosSingleSignOnExtension.Builder passwordChangeUrl​(String passwordChangeUrl)
        “Gets or sets the URL that the user will be sent to when they initiate a password change.”
        Parameters:
        passwordChangeUrl - value of passwordChangeUrl property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordEnableLocalSync

        public MacOSKerberosSingleSignOnExtension.Builder passwordEnableLocalSync​(Boolean passwordEnableLocalSync)
        “Enables or disables password syncing. This won't affect users logged in with a mobile account on macOS.”
        Parameters:
        passwordEnableLocalSync - value of passwordEnableLocalSync property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordExpirationDays

        public MacOSKerberosSingleSignOnExtension.Builder passwordExpirationDays​(Integer passwordExpirationDays)
        “Overrides the default password expiration in days. For most domains, this value is calculated automatically.”
        Parameters:
        passwordExpirationDays - value of passwordExpirationDays property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordExpirationNotificationDays

        public MacOSKerberosSingleSignOnExtension.Builder passwordExpirationNotificationDays​(Integer passwordExpirationNotificationDays)
        “Gets or sets the number of days until the user is notified that their password will expire (default is 15).”
        Parameters:
        passwordExpirationNotificationDays - value of passwordExpirationNotificationDays property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordMinimumAgeDays

        public MacOSKerberosSingleSignOnExtension.Builder passwordMinimumAgeDays​(Integer passwordMinimumAgeDays)
        “Gets or sets the minimum number of days until a user can change their password again.”
        Parameters:
        passwordMinimumAgeDays - value of passwordMinimumAgeDays property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordMinimumLength

        public MacOSKerberosSingleSignOnExtension.Builder passwordMinimumLength​(Integer passwordMinimumLength)
        “Gets or sets the minimum length of a password.”
        Parameters:
        passwordMinimumLength - value of passwordMinimumLength property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordPreviousPasswordBlockCount

        public MacOSKerberosSingleSignOnExtension.Builder passwordPreviousPasswordBlockCount​(Integer passwordPreviousPasswordBlockCount)
        “Gets or sets the number of previous passwords to block.”
        Parameters:
        passwordPreviousPasswordBlockCount - value of passwordPreviousPasswordBlockCount property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordRequireActiveDirectoryComplexity

        public MacOSKerberosSingleSignOnExtension.Builder passwordRequireActiveDirectoryComplexity​(Boolean passwordRequireActiveDirectoryComplexity)
        “Enables or disables whether passwords must meet Active Directory's complexity requirements.”
        Parameters:
        passwordRequireActiveDirectoryComplexity - value of passwordRequireActiveDirectoryComplexity property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • passwordRequirementsDescription

        public MacOSKerberosSingleSignOnExtension.Builder passwordRequirementsDescription​(String passwordRequirementsDescription)
        “Gets or sets a description of the password complexity requirements.”
        Parameters:
        passwordRequirementsDescription - value of passwordRequirementsDescription property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • preferredKDCs

        public MacOSKerberosSingleSignOnExtension.Builder preferredKDCs​(List<String> preferredKDCs)
        “Add creates an ordered list of preferred Key Distribution Centers (KDCs) to use for Kerberos traffic. This list is used when the servers are not discoverable using DNS. When the servers are discoverable, the list is used for both connectivity checks, and used first for Kerberos traffic. If the servers don’t respond, then the device uses DNS discovery. Delete removes an existing list, and devices use DNS discovery. Available for devices running macOS versions 12 and later.”
        Parameters:
        preferredKDCs - value of preferredKDCs property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • preferredKDCs

        public MacOSKerberosSingleSignOnExtension.Builder preferredKDCs​(String... preferredKDCs)
        “Add creates an ordered list of preferred Key Distribution Centers (KDCs) to use for Kerberos traffic. This list is used when the servers are not discoverable using DNS. When the servers are discoverable, the list is used for both connectivity checks, and used first for Kerberos traffic. If the servers don’t respond, then the device uses DNS discovery. Delete removes an existing list, and devices use DNS discovery. Available for devices running macOS versions 12 and later.”
        Parameters:
        preferredKDCs - value of preferredKDCs property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • preferredKDCsNextLink

        public MacOSKerberosSingleSignOnExtension.Builder preferredKDCsNextLink​(String preferredKDCsNextLink)
        “Add creates an ordered list of preferred Key Distribution Centers (KDCs) to use for Kerberos traffic. This list is used when the servers are not discoverable using DNS. When the servers are discoverable, the list is used for both connectivity checks, and used first for Kerberos traffic. If the servers don’t respond, then the device uses DNS discovery. Delete removes an existing list, and devices use DNS discovery. Available for devices running macOS versions 12 and later.”
        Parameters:
        preferredKDCsNextLink - value of preferredKDCs@nextLink property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • realm

        public MacOSKerberosSingleSignOnExtension.Builder realm​(String realm)
        “Gets or sets the case-sensitive realm name for this profile.”
        Parameters:
        realm - value of realm property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • requireUserPresence

        public MacOSKerberosSingleSignOnExtension.Builder requireUserPresence​(Boolean requireUserPresence)
        “Gets or sets whether to require authentication via Touch ID, Face ID, or a passcode to access the keychain entry.”
        Parameters:
        requireUserPresence - value of requireUserPresence property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • signInHelpText

        public MacOSKerberosSingleSignOnExtension.Builder signInHelpText​(String signInHelpText)
        “Text displayed to the user at the Kerberos sign in window. Available for devices running iOS and iPadOS versions 14 and later.”
        Parameters:
        signInHelpText - value of signInHelpText property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • tlsForLDAPRequired

        public MacOSKerberosSingleSignOnExtension.Builder tlsForLDAPRequired​(Boolean tlsForLDAPRequired)
        “When set to True, LDAP connections are required to use Transport Layer Security (TLS). Available for devices running macOS versions 11 and later.”
        Parameters:
        tlsForLDAPRequired - value of tlsForLDAPRequired property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • usernameLabelCustom

        public MacOSKerberosSingleSignOnExtension.Builder usernameLabelCustom​(String usernameLabelCustom)
        “This label replaces the user name shown in the Kerberos extension. You can enter a name to match the name of your company or organization. Available for devices running macOS versions 11 and later.”
        Parameters:
        usernameLabelCustom - value of usernameLabelCustom property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • userPrincipalName

        public MacOSKerberosSingleSignOnExtension.Builder userPrincipalName​(String userPrincipalName)
        “Gets or sets the principle user name to use for this profile. The realm name does not need to be included.”
        Parameters:
        userPrincipalName - value of userPrincipalName property (as defined in service metadata)
        Returns:
        this (for method chaining)
      • userSetupDelayed

        public MacOSKerberosSingleSignOnExtension.Builder userSetupDelayed​(Boolean userSetupDelayed)
        “When set to True, the user isn’t prompted to set up the Kerberos extension until the extension is enabled by the admin, or a Kerberos challenge is received. Available for devices running macOS versions 11 and later.”
        Parameters:
        userSetupDelayed - value of userSetupDelayed property (as defined in service metadata)
        Returns:
        this (for method chaining)