Skip to main content

I'm looking to setup, add a domain (DRC WIDA testing) to a configuration profile with "Relaxed Domains" for our iPads. I don't see it anywhere I've looked in Jamf Pro configuration profiles, but Apple and WIDA have references to it. This would allow us finally to not have to manually toggle Cross-Site tracking to "on" on each iPad!!!!

I've setup a custom configuration as described but I'm hoping there is a non-custom method that I'm just missing.

 

This functionality is supported by a key in the Domains payload CrossSiteTrackingPreventionRelaxedDomains.

 

From WIDA / DRC Insight

Cross-Website Tracking and Device Supervision


Important: Sites using iPadOS 16.2 and higher no longer need to enable Cross-Website Tracking as
long as the device is supervised and the domains are relaxed following the instructions below. This can be
done using Automated Device Enrollment and MDM software or by using Apple Configurator.
Note:

  • Sites using iPadOS 16.1.2 and below must still enable Cross-Website Tracking.
  • Supervision must be enabled for all devices regardless of iPadOS version.

Supervising iPadOS Devices


Supervise a Device Using MDM Software and Relaxing Domains
If you are using MDM software, DRC INSIGHT checks the device serial number and directs you to your
designated MDM server, where you can view and edit your enrollment profile. Once the device is enrolled it
is automatically supervised.
For more information, work with your MDM provider and Apple.

1. In the Domains payload option within your MDM, locate the Cross-site tracking relaxed for domains
field.
• If you do not see this field, you will have to create a custom profile and upload it to your MDM.
2. Enter the following domains to be relaxed:
• <string>DRC-centraloffice.com</string>
• <string>http://drc-centraloffice.com:55222</string>
Note: 55222 is the default port value. Use the same port that you used during COS - SD installation
if you used a custom port.
• <string>DRCedirect.com</string>
• <string>WIDA-ams.us</string>
3. You no longer need to enable Cross-Website Tracking for testing. However, if you receive a content
retrieval error message when you begin a test and think the domains may not be relaxed, enable Cross-
Website tracking in the iPad settings and are able to begin a test then the domains have not been relaxed.

@IT-CKrape, after installing the profile are you seeing the "Allow Cross-Website Tracking" under Settings > Apps > DRC Insight automatically turned on? See my above reply to wsievers. 


Thanks for any insight!


@jr139 No, I am not seeing the slider under the DRC app altered by this profile installation. 


From what I was able to find with DRC documentation, after a certain version of IOS the cross-site tracking slider was no longer necessary, but we have not found this to be the case.


After we installed this profile on our devices, the slider becomes irreverent and the students are simply able to access the content.  :-)


Hope this helps!


 


@jr139 No, I am not seeing the slider under the DRC app altered by this profile installation. 


From what I was able to find with DRC documentation, after a certain version of IOS the cross-site tracking slider was no longer necessary, but we have not found this to be the case.


After we installed this profile on our devices, the slider becomes irreverent and the students are simply able to access the content.  :-)


Hope this helps!


 


Many thanks for the quick reply! Hard to believe testing season is right around the corner. 


Many thanks for the quick reply! Hard to believe testing season is right around the corner. 


@jr139 Yeah it is coming up quick! 


My district elected to do the Firefly exams that DRC released this year, so we were able to test these profiles / settings in production with the students.  I can confirm that they work and that none of our students needed to access the DRC app settings to move the slider. 


Since the Firefly exam really doesn't attach to any permanent / historically cached student information, it is a great trial run to ensure functionality if would like that extra peace of mind.  :-)


I used iMazing's Profile editor to create one, even though it's very simple as it had the "Relaxed Domain" category that Jamf Pro is missing from its domain section.  


Is this available on the the free version?


Hello everyone, 


I was successful in getting this to work. See the attached screen shot, it shows how we had to set it up with Jamf PRO and iMazing Profile creator. This was the response from DRC in my help ticket with them. Also attached below is a screen shot of my iMazing profile I uploaded to Jamf PRO.


You mentioned allowing "domains,"  please allow the specific URLs on those allowlisting tables from both the WIDA and Pennsylvania Technology User Guides (links provided in previous email) to be as specific as the DRC allowlisting tables specify.


 


Additionally, I came across this information from another user who was having a similar issue with getting his MDM to properly control their iPadOS 18.1 iPad's Cross-Website Tracking--maybe it will work for your MDM & iPads.


 


He said, "After adding the new key below to the mobileconfig file, we were able to log into WIDA DRC Insight without error, and did not have to manually enable the “Allow Cross-Website Tracking” toggle on each iPad.


 


<key>CrossSiteTrackingPreventionRelaxedApps</key>


<array>


<string>com.drc.wbte-ipad.drc</string>


</array>


 



Was this done with the free version?


Hello everyone, 


I was successful in getting this to work. See the attached screen shot, it shows how we had to set it up with Jamf PRO and iMazing Profile creator. This was the response from DRC in my help ticket with them. Also attached below is a screen shot of my iMazing profile I uploaded to Jamf PRO.


You mentioned allowing "domains,"  please allow the specific URLs on those allowlisting tables from both the WIDA and Pennsylvania Technology User Guides (links provided in previous email) to be as specific as the DRC allowlisting tables specify.


 


Additionally, I came across this information from another user who was having a similar issue with getting his MDM to properly control their iPadOS 18.1 iPad's Cross-Website Tracking--maybe it will work for your MDM & iPads.


 


He said, "After adding the new key below to the mobileconfig file, we were able to log into WIDA DRC Insight without error, and did not have to manually enable the “Allow Cross-Website Tracking” toggle on each iPad.


 


<key>CrossSiteTrackingPreventionRelaxedApps</key>


<array>


<string>com.drc.wbte-ipad.drc</string>


</array>


 



iMazing that is


Hello all,


We’re receiving reports from teachers that during DRC testing on iPads, the “Prevent Cross-Site Tracking” setting keeps turning off after being manually enabled. I deployed the configuration recommended by @wsievers  and others, but some users are still reporting issues—specifically, that DRC testing doesn’t work unless this setting is enabled.


 


According to the documentation I’ve reviewed, iPads running iPadOS 16.2 and above shouldn’t require this setting to be on. However, users continue to experience errors until it is manually enabled. The main issue in our environment is that the setting does not stay enabled, and staff have to repeatedly toggle it back on.

Any ideas on this issue? Thanks in advance!


Hello all,


We’re receiving reports from teachers that during DRC testing on iPads, the “Prevent Cross-Site Tracking” setting keeps turning off after being manually enabled. I deployed the configuration recommended by @wsievers  and others, but some users are still reporting issues—specifically, that DRC testing doesn’t work unless this setting is enabled.


 


According to the documentation I’ve reviewed, iPads running iPadOS 16.2 and above shouldn’t require this setting to be on. However, users continue to experience errors until it is manually enabled. The main issue in our environment is that the setting does not stay enabled, and staff have to repeatedly toggle it back on.

Any ideas on this issue? Thanks in advance!


Good Morning,


I believe we have read the same documentation and I can confirm that the you will either need the configuration profile via iMazing or manually adjusting the slider.  Using the information on this post, we have been able to navigate Firefly, PSSAs, and Keystones without needing to manually check the DRC app "Prevent Cross-Site Tracking" options, so I would highly recommend the iMazing configuration for simplicity.


Good Morning,


I believe we have read the same documentation and I can confirm that the you will either need the configuration profile via iMazing or manually adjusting the slider.  Using the information on this post, we have been able to navigate Firefly, PSSAs, and Keystones without needing to manually check the DRC app "Prevent Cross-Site Tracking" options, so I would highly recommend the iMazing configuration for simplicity.


Thanks! I was able to get the configuration profile set up after spending some time learning how to use iMazing. I tested it on a few iPads, and it appears to be working as expected. I’ve now scoped it to all managed iPads. I really appreciate coming across this thread—it was a big help!


Reply