Hello,
I'm currently working on implementing Autonomous Single App Mode (ASAM) on macOS and have been following the official Apple documentation:
I've configured and deployed the ASAM profile to a Mac using Jamf, but unfortunately, the target app does not launch automatically, and the system does not appear to enter ASAM as expected.
Here is the profile I’ve been using:
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadType</key>
<string>com.apple.asam</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>PayloadIdentifier</key>
<string>com.test.lockscreenapp.asam</string>
<key>PayloadUUID</key>
<string>c324fd3e-d98a-4ea8-818a-5991024cddd0</string>
<key>PayloadDisplayName</key>
<string>ASAM - Lockscreen</string>
<key>PayloadEnabled</key>
<true/>
<key>AllowedApplications</key>
<array>
<dict>
<key>BundleIdentifier</key>
<string>com.test.LockscreenApp</string>
<key>TeamIdentifier</key>
<string>YOUR_TEAM_ID</string>
</dict>
</array>
</dict>
</array>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>PayloadIdentifier</key>
<string>com.okta.lockscreenapp.profile</string>
<key>PayloadUUID</key>
<string>467ab3a0-9423-4c16-a05c-5c99d771088f</string>
<key>PayloadDisplayName</key>
<string>Lockscreen ASAM Profile</string>
<key>PayloadOrganization</key>
<string>TestingApp</string>
<key>forceASAMAppBundleID</key>
<array>
<string>com.test.LockscreenApp</string>
</array>
</dict>
</plist>
Despite the profile being successfully installed, the system doesn’t enter ASAM and doesn’t launch the specified app.
Has anyone successfully deployed and tested ASAM on macOS? Specifically:
-
Are there any required APIs or Info.plist keys the app must implement?
-
Is there a way to programmatically monitor or validate that ASAM was triggered on the device?
-
Does the app need to be signed in a specific way or trigger an event upon launch?
Any insights or examples would be greatly appreciated.
Thank you!