Suggestions
Have a great idea that you’d like to see added to our service? Perhaps there’s an existing feature that you’d like to have extended or modified? Share it here!
151 results found
-
support media deployment for macOS
apple supports this, just need it in SimpleMDM
3 votesMedia installation on macOS via MDM was deprecated in macOS 11.
-
Provide a UI to configure system level DNS over HTTPS (DoH) and DNS over TLS (DoT) for macOS and iOS
Many of us managing devices via MDM have to assume the devices are on networks that are insecure, malicious, or in the best case scenario, not malicious but definitely not private.
The standard way of doing DNS in those environments is unsafe, as the DHCP server can provide any resolver, and the traffic to those servers is made in the clear.
DNS over HTTPS (DoH) and DNS over TLS (DoT) are two options we have to make computing in such environments safer, by ensuring queries are encrypted as they leave the device.
Big Sur and iOS 14 both support this,…
1 voteClosing due to inactivity (5+ years no votes/comments), available alternatives (custom profiles), and lack of specificity (dozens of configs included in the source). I can certainly see the value, but would love more input / specifics to know which configs to prioritize.
-
Munki Firefox in multiple languages
At the moment Firefox is only available in English at Munki. It would be great if more languages were supported.
1 voteClosing due to inactivity (no votes/comments for 5+ years). Please open a package request for new shared apps if this is still important: https://simplemdm.pdq.com/hc/en-us/p/packageRequest
-
More options for LDAP Authentication
It would be great if there would be the option to use more LDAP attribute then only the UI or DN of a user. Especially the "sAMAccountName" would be helpful for classical AD oder SAMBA AD shops.
1 voteClosing this request due to inactivity and it is no longer relevant. The LDAP authentication feature was deprecated/removed a while back because there were zero accounts using it.
-
Add the Configuration profile - Network usage rules
I'd like to be able to natively use the Network usage rules configuration profile, rather than creating a custom configuration profile.
This will give me the ability to control what network type an app can use.
https://support.apple.com/en-nz/guide/mdm/mdmd912072f4/web
I'm happy for users to install Social Media apps on their company phones. But not use cellular data, only Wi-Fi.3 votesClosing due to inactivity (5+ years no votes/comments)
-
Support AWS EventBridge SaaS Integration
A.) Support AWS EventBridge SaaS Integration
Amazon EventBridge enables customers to build event-driven applications that subscribe to events from any participating software-as-a-service (SaaS) product without needing to write undifferentiated connection code.B.) Publish a SimpleMDM Specific Event Schema for SimpleMDM Events available via the integration
Rationale:
Unfiltered access to SimpleMDM client events without reliance on a webhook push with minimal information. Extensible to any and all events that happen within a SimpleMDM account/instance.1 voteClosing due to inactivity (no votes/comments for 5+ years)
-
support encrypted payloads in profiles
Currently any profile uploaded to SimpleMDM as custom profile has to have a 'PayloadContent'-Key to be accepted.
All data in this Payload is plain text which isn't a good fit if you want for example to provide password protected certificates for S/MIME Email encryption within that payload. As leaving the password blank to get it as user input during installation only works for direct installation not for MDM provisioned profiles there is no secure way to get said certificates onto the users devices using SimpleMDM.Supporting the upload of encrypted profiles with a 'EncryptedPayloadContent'-Key would allow users to provide password…
1 voteClosing due to inactivity (no votes/comments for 5+ years)
-
Should support ALL features from Apple Profile Manager
SimpleMDM should support ALL features and settings from Apple Profile Manager.
If it did, it would be possible to move from something Apple only delivers as a kind of "proof of concept" to a system that seems to more pointed towards the future. At the moment SimpleMDM lacks too many profile settings.
4 votesClosing due to inactivity and lack of specificity. If there are still missing features that are valuable, I recommend submitting individual suggestions for each feature that is a priority. This allows other users to vote for those specific features and is easier for us to track, understand specific use-cases, and gauge priority.
-
Show digits and letters in different colors when revealing passwords
When revealing passwords (such as Firmware Password), display numbers and letters in different colors. With the current font it's, for example, really hard to separate lower case L from the number one. Attaching a screenshot on how 1Password does this.
2 votesI'm cancelling this one since the font has been updated to be standardized and more clear for device secrets, and we've also added the option to copy these values. If this is still important despite these changes, please let us know.
-
Make macOS DEP-installed Administrator more configurable
First priority: the administrator account should be optional. I install my admin account via a signed package, and go out of my way to disable the simplemdm-created account.
If that's not possible, at least allow me to set the UID of the user to something <500 so it's more invisible to users.
2 votesThe comments on this post have covered most of the points, but the main reason for closing this request is that Apple's MDM spec does not currently give us control over the UID of the auto-admin account. As others have noted, you can optionally hide the auto-admin account from other local users, or prevent it from being created entirely - these settings already exist and are available to all accounts.
-
Allow Admins to Edit Profile PayloadIdentifier Values
With admins having to move profiles to MDM in 10.16, it would be great to be able to edit the Simple created PayloadIdentifier for these profiles to match existing values.
A warning dialog box to explain the issues this may create would be sufficient (and welcome) to help admins know the risks with editing the value.
0 votesClosing due to inactivity (no votes/comments for 5+ years)
-
preset passcodes
I would like to be able to preset a passcode and/ or change the passcode on a device.
5 votesApple does not currently make this possible via MDM.
-
create a way to connect to a file server on native file iOS app
Need a way to add an smb server connection automatically. I would like to use the native files ios app. I am not seeing this as possible currently as the app is not custom configurable like apps that are purchased. Would be useful in connections to local server that are not cloud based yet but are connectable over vpn with remote work going on now.
4 votesApple does not currently provide an option for this within the MDM spec
-
Asset management/Security (email addition)
When enrolling a user into the platform, it would be nice to capture the email account that they used to gain the enrollment link and add to the device information. This allows the Admin an easier time finding the device when a user is added or removed. Another big improvement would be for security, If a device is lost or stolen sometimes having to find "John smith'"s device can be hard and time-consuming when he named it "bobby's world mac" or "this is my mac". By simply having another way to identify the device i.e [email protected] would make it much…
3 votesClosing due to inactivity (no votes/comments for 5+ years). SAML authentication for enrollments can be used to achieve this.
-
Show Device Lock status via webUI and API
So - similar to JP's suggestion... https://suggestions.simplemdm.com/forums/204404-suggestions/suggestions/36523045-show-a-list-of-locked-devices
BUT - at the moment a device can have one of three statuses returned via the API
*enrolled
*enrolling
*unenrolledCould you also add
*Lock Command sent
*Lock command received(or similar) as a status. We're in a position where we want to prevent multiple device admins sending lock commands to the same lost device. Yes you can check the logs first, but are folk really going to do that?
We also want to build a lock functionality via the API - and want to be able to check if a lock command…
2 votesThis is a great suggestion! However, there are some technical limitations. Currently, MDM does not receive an "unlocked" status back from a device. So while we can deduce with fairly high certainty when a device is locked, knowing precisely when it is no longer locked isn't necessarily reliable.
My advice would be to submit an Apple Feedback with a suggestion to add a status report for device locked status. This would allow MDM to more reliably determine a device locked state.
-
show log history of app activity on device
This is a feature built into apple settings and should be pullable on an mdm solution. So we can report back activity to managers and know which apps are getting used that we deploy. Especially important with an increasingly large remote workforce.
1 voteClosing due to inactivity (no votes/comments for 5+ years) and feasibility (this functionality is not currently supported via Apple's MDM spec).
-
The ability to reorganize or customize the arrangement of the Profiles page
The Profiles page becomes cluttered by all the different profiles inserted, it would be very helpful if there was an option to organize them in maps.
4 votesClosing due to inactivity (no votes/comments for 5+ years)
-
Change "save" when editing a profile
... to a different word. Perhaps "save and push"? Or perhaps saving and pushing should be two separate things.
It's not self evident when you save the profile that it also will push the new profile to all of the devices.
1 voteClosing due to inactivity (no votes/comments for 5+ years)
-
Change the wording of the "refresh inventory" feature
It's not great wording. Instead, the classic circular arrows chasing each other in a button form could be used.
1 voteClosing due to inactivity (no votes/comments for 5+ years)
-
Dropdown Menu or Arrows for Efficient Scrolling Through Device List
Very minor request. But it would be nice to have a drop-down menu or up and down arrows when on the device detail page so you may easily scroll through your device list—just as on the device group detail page.
1 voteClosing due to inactivity (no votes/comments for 5+ years)
- Don't see your idea?