<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z0000AIHnIUCQ1Okta Classic EngineSingle Sign-OnAnswered2026-05-13T09:00:39.000Z2024-12-14T00:24:24.000Z2024-12-16T17:03:34.000Z

z1xcj (z1xcj) asked a question.

Apple Business Manager/Essentials and Extensible SSO

I have been attempting to create a custom profile to upload to Apple Business Manager/Apple Business Essentials. I have the mobileconfig file created and everything looks like it should. I have the same values that I used to deploy it via Intune. When I upload the file, I get the following errors:

 

Issues were found in some of your payloads.

Make changes and re-upload your file.

 

Extensible Single Sign-On

 

ExtensionIdentifier

The value of this key is not allowed.

 

TeamIdentifier

The value of this key is not allowed.

 

Has anyone experienced this issue and (hopefully) have a workaround? Apple Business Support was ZERO help.


  • Hi @z1xcj (z1xcj)​ , Thank you for reaching out to the Okta Community! 

     

    The integration is not that popular or at least the use case seems to be uncommon as I have not been able to find any similar reports or relevant info for the expected values. 

    Assuming that "ExtensionIdentifier" and "TeamIdentifier" are some kind of custom attributes,  is there any way for you to confirm the parity between what is being sent from the Okta side with what is on the Apple side? As in, the Okta user profile attributes (including the "data type" - string, array, etc.)vs the Apple profile.

    The error seems to suggest some kind of mismatch.  

     

     

    Regards.

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
This question is closed.
Loading
Apple Business Manager/Essentials and Extensible SSO