NoMAD Login

menu.nomad.login.ad

NoMAD Login settings

macOS

Configuration Keys (76)

Showing 76 of 76 keys

Key	Type	Description	Default	Range
`ADDomain`string Active Directory Domain required	string	Defines the AD domain you're working with.	Default: —	Range: —
`PFC_SegmentedControl_0`string required	string	—	Default: —	Range: —
`DenyLocal`boolean Deny Local Users	boolean	—	Default: —	Range: —
`DenyLocalExcluded`array Deny Local User Exclusions	array	—	Default: —	Range: —
string Username	string	—	Default: —	Range: —
`DenyLoginUnlessGroupMember`array Allowed Group Membership User Logins	array	—	Default: —	Range: —
string Group Name	string	—	Default: —	Range: —
`RecursiveGroupLookup`boolean Recursive Group Lookup	boolean	If set to yes, group membership lookups should be done recursively	Default: —	Range: —
`Migrate`boolean	boolean	If yes, migrate users	Default: —	Range: —
`MigrateUsersHide`array Hidden Migration User	array	—	Default: —	Range: —
string User Name	string	—	Default: —	Range: —
`PasswordOverwriteSilent`boolean Password Overwrite Silent	boolean	—	Default: —	Range: —
`PasswordOverwriteOptional`boolean Password Overwrite Optional	boolean	—	Default: —	Range: —
`LocalFallback`boolean Local Fallback	boolean	—	Default: —	Range: —
`LDAPServers`array	array	List of LDAP servers that you would like to use for AD authentication instead of using SRV record lookup.	Default: —	Range: —
`Server`string	string	—	Default: —	Range: —
`LDAPOverSSL`boolean LDAP Over SSL	boolean	Determines if NoMAD Login uses LDAP over SSL.	Default: false	Range: —
`AdditionalADDomains`array Additional Active Directory Domains	array	List of domains to append at the loginwindow. If not set, the standard Managed Domain policy will apply.	Default: —	Range: —
`Domain`string	string	—	Default: —	Range: —
`AdditionalADDomainList`array Domain Dropdown List	array	List of LDAP servers to display in the pulldown menu in the Login Window. Users can select a domain from the menu and then only enter the shortname in the text field.	Default: —	Range: —
`Domain`string	string	—	Default: —	Range: —
`NTtoADDomainMappings`dict	dict	Maps NT to AD Domains. e.g. NOMAD: nomad.menu, would allow a user to sign in as "NOMAD\user" and that would be converted to "user@nomad.menu" before authenticating to AD.	Default: —	Range: —
`TextFields`array NT to AD Domain Mappings	array	—	Default: —	Range: — – 5
`TextField`dict	dict	—	Default: —	Range: —
`ntname`string NT Name	string	—	Default: —	Range: —
`addomain`string AD Domain	string	—	Default: —	Range: —
`AliasNTName`boolean Alias NT Name	boolean	—	Default: —	Range: —
`AliasUPN`boolean Alias User Principal Name	boolean	—	Default: —	Range: —
`IgnoreSites`boolean Ignore Sites	boolean	—	Default: —	Range: —
`EULATitle`string End User License Agreement Title	string	Text for the large title in the EULA window.	Default: —	Range: —
`EULASubTitle`string End User License Agreement Subtitle	string	Text for a subtitle in the EULA window.	Default: —	Range: —
`EULAText`string End User License Agreement Text	string	Text to present in the EULA window.	Default: —	Range: —
`EULAPath`string End User License Agreement Save Path	string	Path to save acceptance records to.	Default: "/var/db/NoMADLogin/"	Range: —
`CreateAdminUser`boolean Create Admin Users	boolean	Will place any local user created at login by NoMAD Login in the local admin group.	Default: false	Range: —
`CreateAdminIfGroupMember`array Group Membership to Create Admin Users	array	List of groups that should have its members created as local administrators.	Default: —	Range: —
`Group`string	string	—	Default: —	Range: —
`UseCNForFullName`boolean Use User Common Name for Full Name	boolean	Use the the user's CN from AD instead of attempting to create the user name from the first and last name attributes of the user's AD record.	Default: —	Range: —
`UseCNForFullNameFallback`boolean Use User Common Name for Full Name Fallback	boolean	Uses the CN as the fullname on the account when the givenName and sn fields are blank	Default: —	Range: —
`UserProfileImage`string User Profile Image	string	Path to an image to set as the user profile image.	Default: —	Range: —
`DemobilizeUsers`boolean Demobilize Users	boolean	Will convert a previously cached mobile account from AD into a regular local user account on login.	Default: false	Range: —
`DemobilizeSaveAltSecurityIdentities`boolean Demobilize Preserve AllSecurityIdentities	boolean	If true, the AltSecurityIdentities user record attribute should be preserved, useful when moving from mobile accounts with smart card mapping implemented.	Default: false	Range: —
`DemobilizeForcePasswordCheck`boolean Demobilize Force Password Check	boolean	If true, a password input at the NoMAD login window will be required to demobilize	Default: false	Range: —
`UserInputOutputPath`string User Input / Output Path	string	Path where the userinfo.plist will be written.	Default: —	Range: —
`UserInputLogo`string User Input Logo	string	Path to a logo file to use for the UserInput mechanism.	Default: —	Range: —
`UserInputTitle`string User Input Title	string	Title for the UserInput mechanism.	Default: —	Range: —
`UserInputMainText`string User Input Text	string	Text for the UserInput mechanism.	Default: —	Range: —
`UserInputUI`dict	dict	UI elements shown during the UserInput mechanism.	Default: —	Range: —
`TextFields`array User Input Text Fields	array	—	Default: —	Range: — – 4
`TextField`dict	dict	—	Default: —	Range: —
`title`string Title	string	—	Default: —	Range: —
`placeholder`string Placeholder	string	—	Default: —	Range: —
`PopUps`array User Input Pop Ups	array	—	Default: —	Range: — – 4
`PopUp`dict	dict	—	Default: —	Range: —
`title`string Title	string	—	Default: —	Range: —
`items`array Items	array	—	Default: —	Range: —
string	string	—	Default: —	Range: —
`Button`dict	dict	—	Default: —	Range: —
`title`string Button	string	—	Default: —	Range: —
`enabled`boolean Button Enabled	boolean	—	Default: —	Range: —
`EnableFDE`boolean Enable FileVault on APFS	boolean	On systems using the APFS filesystem, this key will enable FileVault encryption as the user is signing in for the first time.	Default: false	Range: —
`EnableFDERecoveryKey`boolean Enable FileVault Recovery Key	boolean	Write the output of the fdesetup command to /var/db/.NoMADFDESetup	Default: false	Range: —
`EnableFDERecoveryKeyPath`string FileVault Recovery Key Path	string	—	Default: —	Range: —
`EnableFDERekey`boolean FileVault Personal Recovery Key Rotation	boolean	—	Default: —	Range: —
`LoginScreen`boolean macOS Style Login Window	boolean	If set to yes, a macOS-style loginscreen will be presented instead of the NoMAD Login loginwindow style.	Default: —	Range: —
`UsernameFieldPlaceholder`string Username Field Placeholder	string	Placeholder text to show in the username textfield.	Default: —	Range: —
`LoginLogo`string Login Logo	string	Path to the logo to display on the login screen. If set to NONE, no logo will be shown.	Default: —	Range: —
`LoginLogoData`data Login Logo Data	data	Logo to display on the login screen.	Default: —	Range: —
`LoginLogoAlpha`integer Login Logo Alpha	integer	Alpha value of the logo image.	Default: 8	Range: 0% (0), 10% (1), 20% (2), 30% (3), 40% (4), 50% (5), 60% (6), 70% (7), 80% (8), 90% (9), 100% (10)
`BackgroundImage`string Login Window Background Image	string	Path to the background image to be used.	Default: —	Range: —
`BackgroundImageData`data Background Image Data	data	Background to display on the login screen.	Default: —	Range: —
`BackgroundImageAlpha`integer Login Window Background Image Alpha	integer	Alpha value of the background image.	Default: 8	Range: 0% (0), 10% (1), 20% (2), 30% (3), 40% (4), 50% (5), 60% (6), 70% (7), 80% (8), 90% (9), 100% (10)
`AllowNetworkSelection`boolean Show Network Selection	boolean	If enabled, the network selection button is shown	Default: false	Range: —
`DefaultSystemInformation`string Default System Information	string	Defines which system information should be showed on login window, by default	Default: —	Range: None, Serial, MAC, Hostname, ComputerName, SystemVersion, IP
`PowerControlDisabled`boolean Hide Shutdown and Restart	boolean	If set to yes, hides the shutdown and restart buttons	Default: false	Range: —
`ManageSecureTokens`boolean Enable Secure Token Management	boolean	This key will enable SecureToken management capabilites in NomadLogin 1.4. This utilizes a service account which can be modified from default using the below optional preferences.	Default: false	Range: —
`SecureTokenManagementEnableOnlyAdminUsers`boolean Enable Only Admin User	boolean	If enabled, the SecureToken service account will only enable administrative users created with NoMAD Login.	Default: false	Range: —
`SecureTokenManagementIconPath`string Secure Token Icon Path	string	—	Default: —	Range: —
`SecureTokenManagementOnlyEnableFirstUser`boolean Only Enable First User	boolean	If enabled, NoMAD Login will only enable the first user that is eligable for a SecureToken, and delete the service account afterwards.	Default: false	Range: —
`SecureTokenManagementFullName`string Service Account Full Name	string	—	Default: —	Range: —
`SecureTokenManagementUID`string Service Account UID	string	—	Default: —	Range: —
`SecureTokenManagementPasswordLocation`string Service Account Password Storage Path	string	—	Default: —	Range: —
`SecureTokenManagementPasswordLength`integer Service Account Password Length	integer	Defines a custom SecureToken service account password length.	Default: 16	Range: 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32
`SecureTokenManagementUsername`string Service Account User Name	string	—	Default: —	Range: —
`MessagePasswordSync`string Password Sync Message	string	Message to show when the password needs to sync	Default: —	Range: —
`ScriptPath`string Script Path	string	—	Default: —	Range: —
`ScriptArgs`array Script Arguments	array	—	Default: —	Range: —
string Arguments	string	—	Default: —	Range: —
`UIDTool`string UID Tool	string	String to determine the path of an executable that is run when a new user is created. It is expected to return the UID that the user should be created with. It passes in the new users username as the first argument, default is to use the built in functionality	Default: —	Range: —
`GUIDTool`string GUID Tool	string	String to determine the path of an executable that is run when a new user is created. It is expected to return the GUID that the user should be created with. It passes in the new users username as the first argument, default is to use the built in functionality	Default: —	Range: —
`NotifyLogStyle`string Add Notify to Management Log File	string	Adds the appropriate log file to the the Notify mechanism.	Default: —	Range: None (none), Jamf (jamf), Filewave (filewave), Munki (munki)
`KeychainCreate`boolean Create Keychain	boolean	Create keychain if it does not exist.	Default: —	Range: —
`KeychainAddNoMAD`boolean Add NoMAD to Keychain	boolean	Add a NoMAD entry into the keychain.	Default: —	Range: —
`CustomNoMADLocation`string Custom NoMAD Location	string	If defined it specifies the custom location of the application to be given access to the keychain item.	Default: —	Range: —
`LastUser`string Last User Shortname	string	Shortname of the last user to login. This allows NoMAD to login on first launch.	Default: —	Range: —
`KeychainReset`boolean Reset Keychain if Password Doesn't Match	boolean	Reset keychain if login password doesn't match.	Default: —	Range: —
`GuestUser`boolean Allow Guest User Login	boolean	Allows guest users login	Default: —	Range: —
`GuestUserAccounts`array Guest User Accounts	array	List of names that can be entered into the username field to trigger a guest user creation	Default: —	Range: —
`GuestNames`string	string	—	Default: —	Range: —
`GuestUserAccountPasswordPath`string Guest User Password Path	string	The path to write out the guest users randomly generated password	Default: —	Range: —
`GuestUserFirst`string Guest User First Name	string	Defines the first name of the guest user account	Default: —	Range: —
`GuestUserLast`string Guest User Last Name	string	Defines the last name of the guest user account	Default: —	Range: —