Skip to main content
Question

Onedrive for Mac can't signin silently

  • November 4, 2024
  • 4 replies
  • 169 views

Forum|alt.badge.img+3

Hello all,

 

I am struggling getting OneDrive to silently sign in and redirect folders.  I have researched previous posts, and am using Microsoft's guide here: https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos to no avail. Here is my configuration policy below -- can anyone take a look and see what I'm missing?  I swapped out my real tenant ID with (Tenant ID) for the sake of sharing.  Thanks for your help.

 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1"> <dict> <key>KFMBlockOptOut</key> <True/> <key>KFMSilentOptIn</key> <string>(Tenant ID)</string> <key>KFMSilentOptInWithNotification</key> <True/> <key>KFMOptInWithWizard</key> <string>(Tenant ID)</string> <key>EnableSyncAdminReports</key> <integer>1</integer> <key>PayloadUUID</key> <string>(Tenant ID)</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadOrganization</key> <string>Microsoft Corporation</string> <key>PayloadIdentifier</key> <string>9FE052B5-E7B6-4BF9-94EB-DB611E0E323E</string> <key>PayloadDisplayName</key> <string>OneDrive - Background Services</string> <key>PayloadDescription</key> <string/> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadEnabled</key> <true/> <key>PayloadRemovalDisallowed</key> <true/> <key>PayloadScope</key> <string>System</string> <key>PayloadContent</key> <array> <dict> <key>PayloadDescription</key> <string>Background Service Management for OneDrive</string> <key>PayloadIdentifier</key> <string>4C3F2438-464E-43F5-8961-D4672D4A9F5D.privacy.C7B71805-73F2-43F6-A5AA-29C9CAD728B4</string> <key>PayloadUUID</key> <string>F9EE3920-EAD8-4472-AF2F-52D2B57FDB31</string> <key>Rules</key> <array> <dict> <key>RuleType</key> <string>LabelPrefix</string> <key>RuleValue</key> <string>com.microsoft.OneDrive</string> </dict> <dict> <key>RuleType</key> <string>BundleIdentifierPrefix</string> <key>RuleValue</key> <string>com.microsoft.OneDriveLauncher</string> </dict> </array> <key>PayloadType</key> <string>com.apple.servicemanagement</string> <key>PayloadDisplayName</key> <string>Background Service Management for OneDrive</string> </dict> </array> </dict> </plist>

 

4 replies

Chubs
Forum|alt.badge.img+23
  • Jamf Heroes
  • November 4, 2024

I think you're settings too much on the front end.  You'll also want to preconfigure the Office plists for "sso" as well as enable the SSOe.  

Try this:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>DisableTutorial</key>
    <true/>
    <key>HideDockIcon</key>
    <true/>
    <key>OpenAtLogin</key>
    <true/>
    <key>DefaultToBusinessFRE</key>
    <true/>
    <key>EnableAddAccounts</key>
    <false/>
    <key>FilesOnDemandEnabled</key>
    <false/>
    <key>EnableODIgnore</key>
    <array/>
    <key>EnableAllOcsiClients</key>
    <true/>
    <key>BlockExternalSync</key>
    <false/>
    <key>KFMSilentOptIn</key>
    <string>tenantKeyHere</string>
    <key>KFMBlockOptIn</key>
    <integer>0</integer>
    <key>KFMBlockOptOut</key>
    <true/>
  </dict>
</plist>
 
Something simple to get started.

Also note: 

Chubs
Forum|alt.badge.img+23
  • Jamf Heroes
  • November 4, 2024

I think you're settings too much on the front end.  You'll also want to preconfigure the Office plists for "sso" as well as enable the SSOe.  

Try this:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>DisableTutorial</key>
    <true/>
    <key>HideDockIcon</key>
    <true/>
    <key>OpenAtLogin</key>
    <true/>
    <key>DefaultToBusinessFRE</key>
    <true/>
    <key>EnableAddAccounts</key>
    <false/>
    <key>FilesOnDemandEnabled</key>
    <false/>
    <key>EnableODIgnore</key>
    <array/>
    <key>EnableAllOcsiClients</key>
    <true/>
    <key>BlockExternalSync</key>
    <false/>
    <key>KFMSilentOptIn</key>
    <string>tenantKeyHere</string>
    <key>KFMBlockOptIn</key>
    <integer>0</integer>
    <key>KFMBlockOptOut</key>
    <true/>
  </dict>
</plist>
 
Something simple to get started.

Also note: 

And I didn't finish my thought - lol.  Note that if users have Dropbox, Box.net, etc. etc. running redirection already, this will fall HARD on its face.  


Forum|alt.badge.img+2

Hello all,

i have the same question as clarbgb.

I already have implemented pSSO and have this configuration profile in place for OneDrive.

As described on this site https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos#background-services, I configured the app settings.

But MS mention also the background service: You need to create system configuration profiles that OneDrive needs to open at sign-in and run reliably in the background. Here's an example:

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1"> <dict> <key>PayloadUUID</key> <string>9FE052B5-E7B6-4BF9-94EB-DB611E0E323E</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadOrganization</key> <string>Microsoft Corporation</string> <key>PayloadIdentifier</key> <string>9FE052B5-E7B6-4BF9-94EB-DB611E0E323E</string> <key>PayloadDisplayName</key> <string>OneDrive - Background Services</string> <key>PayloadDescription</key> <string/> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadEnabled</key> <true/> <key>PayloadRemovalDisallowed</key> <true/> <key>PayloadScope</key> <string>System</string> <key>PayloadContent</key> <array> <dict> <key>PayloadDescription</key> <string>Background Service Management for OneDrive</string> <key>PayloadIdentifier</key> <string>4C3F2438-464E-43F5-8961-D4672D4A9F5D.privacy.C7B71805-73F2-43F6-A5AA-29C9CAD728B4</string> <key>PayloadUUID</key> <string>F9EE3920-EAD8-4472-AF2F-52D2B57FDB31</string> <key>Rules</key> <array> <dict> <key>RuleType</key> <string>LabelPrefix</string> <key>RuleValue</key> <string>com.microsoft.OneDrive</string><!--This would be com.microsoft.OneDrive-mac for the Store app--> </dict> <dict> <key>RuleType</key> <string>BundleIdentifierPrefix</string> <key>RuleValue</key> <string>com.microsoft.OneDriveLauncher</string> </dict> </array> <key>PayloadType</key> <string>com.apple.servicemanagement</string> <key>PayloadDisplayName</key> <string>Background Service Management for OneDrive</string> </dict> </array> </dict> </plist>

 

But I don't know, do I have to include this into the com.microsoft.OneDrive config profile, or do I need to create a separate config profile? If a separate config profile is needed, which preference domain should I use for this?

Thank you!

BG René

 


@clarbgb wrote:

Hello all,

 

I am struggling getting OneDrive to silently sign in and redirect folders.  I have researched previous posts, and am using Microsoft's guide here: https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos to no avail. Here is my configuration policy below -- can anyone take a look and see what I'm missing?  I swapped out my real tenant ID with (Tenant ID) for the sake of sharing.  Thanks for your help.

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1"> <dict> <key>KFMBlockOptOut</key> <True/> <key>KFMSilentOptIn</key> <string>(Tenant ID)</string> <key>KFMSilentOptInWithNotification</key> <True/> <key>KFMOptInWithWizard</key> <string>(Tenant ID)</string> <key>EnableSyncAdminReports</key> <integer>1</integer> <key>PayloadUUID</key> <string>(Tenant ID)</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadOrganization</key> <string>Microsoft Corporation</string> <key>PayloadIdentifier</key> <string>9FE052B5-E7B6-4BF9-94EB-DB611E0E323E</string> <key>PayloadDisplayName</key> <string>OneDrive - Background Services</string> <key>PayloadDescription</key> <string/> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadEnabled</key> <true/> <key>PayloadRemovalDisallowed</key> <true/> <key>PayloadScope</key> <string>System</string> <key>PayloadContent</key> <array> <dict> <key>PayloadDescription</key> <string>Background Service Management for OneDrive</string> <key>PayloadIdentifier</key> <string>4C3F2438-464E-43F5-8961-D4672D4A9F5D.privacy.C7B71805-73F2-43F6-A5AA-29C9CAD728B4</string> <key>PayloadUUID</key> <string>F9EE3920-EAD8-4472-AF2F-52D2B57FDB31</string> <key>Rules</key> <array> <dict> <key>RuleType</key> <string>LabelPrefix</string> <key>RuleValue</key> <string>com.microsoft.OneDrive</string> </dict> <dict> <key>RuleType</key> <string>BundleIdentifierPrefix</string> <key>RuleValue</key> <string>com.microsoft.OneDriveLauncher</string> </dict> </array> <key>PayloadType</key> <string>com.apple.servicemanagement</string> <key>PayloadDisplayName</key> <string>Background Service Management for OneDrive</string> </dict> </array> </dict> </plist>

 


 


Forum|alt.badge.img+7
  • Valued Contributor
  • February 12, 2026

Did you figure out how to do this? Like where specifically in the configuration profile the XML from https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos#background-services should go?

 

The microsoft documentation, of course, does not tell you where this xml should go in the configuration profile… 

I am trying to solve various onedrive issues on my few macs and think this might help. The next will be to try and get it to autopopulate the email address in onedrive setup. I dont want to do automatic folder redirection as i dont want a bunch of garbage mac files polluting peoples onedrives. i just want files that the users specifically put there.

 

Is it under “application and custom settings” and then same question, what did you put for domain?