NoMAD Pro

menu.nomad.NoMADPro

NoMAD Pro settings

macOS

Configuration Keys (68)

Key	Type	Title	Description	Default	Range
`AuthServer`	string	—	URL for the Okta server, note no preceding https: is required.	"dev-660125.oktapreview.com"	—
`PFC_SegmentedControl_0`required	string	—	—	—	—
`LicenseFile`	data	—	The contents of a .nomadlicense file encoded as Base64 data.	—	—
`PeriodicUpdateTime`	integer	—	Time in minutes between periodic background updates.	15	—
`SignInCommand`	string	—	Path to a script or other binary to be run after a successful sign in.	—	—
`PFC_SegmentedControl_General`required	string	—	—	—	—
`UseKeychainPrompt`	boolean	—	Shows the Sign In window on launch unless the user has a password in the keychain.	—	—
`UseKeychainPromptExlusions`	array	—	List of users that can ignore the keychain prompt.	—	—
`User`	string	—	—	—	—
`SignInLogo`	string	—	Path to a logo file. The space is 342x90 pixels.	—	—
`TitleSignIn`	string	—	Title of the Sign In window.	"Sign in to Okta"	—
`LabelUsername`	string	—	The text label for the username field in the Sign In window.	"Corporate e-mail"	—
`LabelPassword`	string	—	The text label for the password field in the Sign In window.	"Corporate Password"	—
`DontShowWelcome`	boolean	—	Disables the showing of the welcome splash screen on launch.	—	—
`AutoAuth`	boolean	—	Determines if web extensions automatically authenticate via the NoMAD Pro UI.	true	—
`CheckSafariExtension`	boolean	—	Determines if the user is warned that the NoMAD Pro extension has not been enabled in Safari.	true	—
`MessagePluginDisabled`	string	—	Text to show when alerting the user that the Safari plugin has not been enabled.	"Please enable the plugin in Safari."	—
`IgnoreDomainReachability`	boolean	—	Determines if SRV record lookups are used to determine if the AD domain is reachable.	—	—
`LDAPServers`	array	—	Specific Domain Controllers to use for AD lookups.	—	—
`LDAPServer`	string	LDAPServer	—	—	—
`KerberosRealm`	string	—	Kerberos realm to use to get Kerberos tickets as a side effect of authentication.	—	—
`TicketsOnSignIn`	boolean	—	Causes NoMAD Pro to get Kerberos Tickets.	—	—
`KerberosRenew`	boolean	—	Determines if the Kerberos tickets should be renewed or not.	—	—
`KerberosShortNameAsk`	boolean	—	Determines if the user is asked to enter their Kerberos short name on first sign in.	—	—
`KerberosShortNameAskMessage`	string	—	The message text when asking the user for their Kerberos short name.	"Please enter your AD user name."	—
`KerberosShortName`	string	—	The shortname to use for Kerberos tickets. If unset the sign in name is used.	"joel"	—
`UseKeychain`	boolean	—	Determines if the Okta password is stored in the user's keychain.	—	—
`LocalPasswordSync`	boolean	—	Determines if the Okta password is synchronized with the local account.	—	—
`LocalPasswordSyncOnMatchOnly`	boolean	—	Only sync the password if the Okta account name is the same as the local account name.	—	—
`LocalPasswordSyncMessage`	string	—	The alert dialog text that the user is presented with when asked to enter in his or her local password.	"Please enter your local user account password."	—
`KeychainItems`	dict	KeychainItems	Items to update when the user's local password is updated as well.	—	—
`{{key}}`	string	Keychain Item	—	—	—
`{{value}}`	string	Account	—	—	—
`KeychainItemsDebug`	boolean	—	Updates keychain items on every sign in. Used for debugging.	true	—
`PFC_SegmentedControl_Password`required	string	—	—	—	—
`ChangePasswordOrder`	array	—	Determines the order and setting for the password change menu. NOT IMPLEMENTED YET, THERE IS NO DOCUMENTATION ON THIS KEY.	—	—
`ChangePasswordItem`	dict	ChangePasswordItem	—	—	—
`PasswordChangeCommand`	string	—	Script or other binary to run when a password is successfully changed.	—	—
`ChangePasswordTimer`	integer	—	Time in minutes until the user is prompted to sign in again after a Password Change.	3	—
`WarnOnPasswordExpiration`	boolean	—	Determines whether NoMAD Pro should warn the user on sign in if the password is about to expire.	—	—
`PasswordExpirationMenu`	boolean	—	Determines if the countdown before password expiration is shown in the menu.	—	—
`PasswordExpirationMenuDays`	integer	—	Number of days remaining before the password expiration countdown is shown in the menu bar.	15	—
`ExpirationWarningDays`	integer	—	Number of days remaining before sending notifications via the Notification Center.	5	—
`ADExpirationShow`	boolean	—	Shows a menu item beneath the current user's name showing the user's password expiration as determined by AD.	—	—
`PasswordPolicy`	dict	—	Complexity policy for changing the password via Kerberos.	—	—
`minLength`	string	—	—	—	—
`minLowerCase`	string	—	—	—	—
`minNumber`	string	—	—	—	—
`minSymbol`	string	—	—	—	—
`minUpperCase`	string	—	—	—	—
`minMatches`	string	—	—	—	—
`ExportableKey`	boolean	—	Allows the private key of the user certificate to be exported.	—	—
`X509CA`	string	—	FQDN of the Windows web CA for NoMAD Pro to use for certificates.	—	—
`Template`	string	—	Certificate template to request when using the Windows CA.	"User Auth"	—
`WifiNetworks`	array	—	A list of wireless networks that the certificate created by NoMAD Pro should be associated with.	—	—
`SSID`	string	—	—	—	—
`MenuIcon`	string	—	Path to a 16x16 pixel image to use as the icon in the menu bar.	—	—
`PFC_SegmentedControl_Menu`required	string	—	—	—	—
`ActionsUpdateTime`	integer	—	Number of minutes between updating the Actions Menu.	15	—
`GetHelpType`	string	—	Determines type of GetHelp function	—
`GetHelpOptions`	string	—	URL or Path for GetHelpType (<<serial>>, <<fullname>>, <<shortname>> and <<domain>> are currently supported as substitutions)	—	—
`SelfServicePath`	string	—	File path for a Self Service application not found automatically.	—	—
`HideAbout`	boolean	—	Hides the About menu item.	—	—
`HideActions`	boolean	—	Hides the Actions menu item.	—	—
`HideChangePassword`	boolean	—	Hides the Change Password menu item.	—	—
`HideGetHelp`	boolean	—	Hides the Get Help menu item.	—	—
`HideGetSoftware`	boolean	—	Hides the Get Software menu item.	—	—
`HideLockScreen`	boolean	—	Hides the Lock Screen menu item.	—	—
`HidePreferences`	boolean	—	Hides the Preferences menu item.	—	—
`HideSignIn`	boolean	—	Hides the Sign In menu item.	—	—
`HideQuit`	boolean	—	Hides the Quit menu item.	—	—
`MessagePasswordChangePolicy`	string	—	Message text when changing password via Kerberos for the AD complexity policy.	"Please review the employee handbook."	—
`MenuAbout`	string	—	Menu item text for the About item.	"This Application"	—
`MenuActions`	string	—	Menu item text for the Actions item.	"Quick Actions"	—
`MenuChangePassword`	string	—	Menu item text for the Change Password item.	"Change network password"	—
`MenuGetHelp`	string	—	Menu item text for the Get Help item.	"File ticket"	—
`MenuGetSoftware`	string	—	Menu item text for the Get Software item.	"Get Apps"	—
`MenuLockScreen`	string	—	Menu item text for the Lock Screen item.	"Screen Lock"	—
`MenuPreferences`	string	—	Menu item text for the Preferences item.	"Prefs"	—
`MenuSignIn`	string	—	Menu item text for the Sign In item.	"Login"	—
`User`	string	—	—	—	—
`LDAPServer`	string	LDAPServer	—	—	—
`{{key}}`	string	Keychain Item	—	—	—
`{{value}}`	string	Account	—	—	—
`ChangePasswordItem`	dict	ChangePasswordItem	—	—	—
`minLength`	string	—	—	—	—
`minLowerCase`	string	—	—	—	—
`minNumber`	string	—	—	—	—
`minSymbol`	string	—	—	—	—
`minUpperCase`	string	—	—	—	—
`minMatches`	string	—	—	—	—
`SSID`	string	—	—	—	—