@promalley I don't see the SetEmailDomainsRestrictedToLogin key in the Zoom documentation, does that work...?

It works for me! One thing to note is that it would be your domain URL not just the domain.

I just noticed they removed the SetEmailDomainsRestrictedToLogin from their support page and added a few other options. I am unsure as to if it will continue to be supported.

As of 4.6.9 it still functions but like you said its future may be in doubt.

The Chrome OS app supports disabling Facebook logins. I tried in vain yesterday to disable that but could only block email sign ins. We aren't allowing students to create accounts or login using school email addresses/accounts. They should only be joining teacher created meetings. Many other keys are available too, but the iOS/iPadOS app doesn't quite have that parity.

The force SSO login prompt should have the X removed from the prompt window. What's the point of forcing it if it can be easily bypassed?

Hi. I'm having a hard time uploading this file to my Jamf Pro. I'm using using the built-in Propertylist editor in MacOS to create a plist with those three configuration items. But it doesn't appear to be a proper plist. What's the easiest way to create a plist or mobileconfig with those items in it? I also downloaded ProfileCreator from Github, but I can't figure out how to make a custom profile with it.

Is it possible to create an app config for iOS/iPadOS where it locks in domain name but the user does not actually log in to the app? The user only connects to a channel?

This would be helpful for our student iPad devices where they would not be creating Zoom accounts and be able to connect with persons outside the domain.

So I've been trying to create a configuration profile to accomplish this. Is that not what this is? what is an app config?

@ralvarezOES Managed app configurations are XML just like property lists and config profiles but they're stripped to just a dictionary array and the settings inside it.
I.e. it should look like this:
<dict>
settings here
</dict>

Ok thanks. I see there is an "app configuration" section in the managed Mobile device Apps. I'll start playing with this, but maybe you can answer a question. If the app is already installed on the devices, would a new configuration take affect? Or would I have to uninstall and reinstall the app on all the devices?

The app doesn't need to be reinstalled. Once a valid config is saved it will send a Managed App Configuration command to the devices. They may need to quit the app if it's open during that time. The worst case scenario is a reinstall using Self Service.

I edited the post with a screenshot of where the configuration should be pasted.

@ralvarezOES Here is zoom's support page

Thanks! Working fine for me

Works well - just wish there was an option to keep kids from uploading custom backgrounds. They can get...creative.

Does anyone have an example of the XML for configuring Zoom for iPads within Jamf School?
I tried to create a Managed App Configuration on the Zoom app and apply it to a group.
I thought I would just try to disable the facebook login. It does display an error "malformed document. First element should be <plist>". Yet it lets me apply to a group and save. But it doesn't work. Any help would be appreciated.

Here is my configuration:
<dict>
<key>DisableFacebookLogin</key>
<integer>1</integer>
</dict>

@jaellington It looks like they do have support for this feature! Zoom Documentation Here

It would look like this:
<dict>
<key>DisableVirtualBkgnd</key>
<integer>1</integer>
</dict>

Unfortunately, this is different in Jamf School. So, when I go into Managed Configuration for the Zoom App, I put in:
<dict>
<key>ForceLoginWithSSO</key>
<integer>0</integer>
<key>mandatory:EnableAppleLogin</key>
<integer>0</integer>
<key>mandatory:DisableFacebookLogin</key>
<integer>1</integer>
<key>mandatory:DisableGoogleLogin</key>
<integer>1</integer>
<key>mandatory:DisableLoginWithEmail</key>
<integer>1</integer>
</dict>

But, I get this error: "malformed document. First element should be <plist>"

So, logically, one would think it should look something like this:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>nogoogle</key>
<true/>
<key>nofacebook</key>
<true/>
<key>disableloginwithemail</key>
<true/>
<key>nosso</key>
<true/>
</dict>
</plist>

Is there any documentation that shows how the plist should be:

1. Written for Zoom


2. Where it is placed


3. Is it a plist or .mobileconfig

A quick Google search shows that it's:

<plist version="1.0">

<dict>

.......

</dict>

</plist>

This should work for Jamf School, but you need to make it the 2nd TAB, not the 1st TAB (leave the 1st TAB blank) and then set the 2nd TAB as the default. The below is if you purchased Zoom and are using SSO.

<plist>
<dict>
<key>ForceLoginWithSSO</key>
<integer>1</integer>
<key>ForceSSOURL</key>
<string>yourdistrict.com</string>
<key>MeetingReminder</key>
<integer>1</integer>
<key>SyncMeetingFromCalendar</key>
<integer>0</integer>
</dict>
</plist>

Hello! Apologies if this has already been answered, but we're starting to notice students using the chat function of Zoom as a texting service during classes. Ideally, we would rather students only be able to join meetings, and not sign-in with their gsuite accounts. Is there a way to do this with xml? I've sent in a ticket already, but was curious to know if anyone here could help me out. Thank you in advance!

@user-tfABOollWd We had that same problem and I solved it by essentially yanking all the authentication methods from their iPads. Use this Managed App Config to do so with Jamf Pro. When they open the app and try to sign in, they then have no method to do so. Of course I have the unrestricted version scoped to the staff:

<dict>

<key>mandatory:EnableAppleLogin</key>

<integer>0</integer>

<key>mandatory:DisableGoogleLogin</key>

<integer>1</integer>

<key>mandatory:DisableFacebookLogin</key>

<integer>1</integer>

<key>mandatory:DisableLoginWithSSO</key>

 <integer>1</integer>

<key>mandatory:DisableLoginWithEmail</key>

 <integer>1</integer>

</dict>

@blackholemac How do you scope a same app with different App Config to two different groups?

@YanW Two instances of the app in the app catalog. So we have two VPP accounts, one scoped to go to Staff which has no app config and the other scoped to Students which has the app config shown above.

Is it possible to use add something in to this xml file to force a sign out of the users account when they close the App? We'd like to have this on some shared sets of iPads (not the 'Shared iPad' feature) but not have the worry of it staying signed into the user's Zoom account when they put the iPad back. Anyone know if this is possible?

Has anyone gotten Zoom iOS configuration to work in jamf school? I am testing Jamf School and am very frustrated. While I appreciate the responses in the thread, none of them seem to work for me. I'm likely missing something. But I just get errors or no change to the app. Thanks