Introduction to profiles

A profile allows administrators to deliver settings based on a collection of rules, based on user groups, device posture scans, or network locations.

  • User groups based on Identity Providers (IdP)

    A user group is a collection of users managed by administrators, often defined in your organization’s identity provider (such as Active Directory). Grouping users allows you to apply settings and policies to multiple users at once. For more information, see the section Configure Authentication.

  • Device posture service (DPS) policies

    Device posture refers to the security and health status of a device. You need to configure device posture rules and use the policy name as a tag in the config. This policy name is set in the create device policy section. Both the compliance result and the device name can be used as criteria. For more details, see the section Configure Device Posture.

  • Network Location service (NLS) policies

    A network location is a policy that determines user access based on their network connection, such as being on an internal or public network. Network location tags are available in the drop-down list when configuring a profile. If you haven’t configured network locations yet, set them up as described in Configure Network Location.

Profile Types

Admin-enforced rules determine which profile type applies to users. User profiles fall into one of the following categories:

  • Default (All users)

    This profile types is the default experience for all users. Settings for default profile apply when:

    • No configuration profile is created for a store URL.
    • The user authenticating to a store does not meet the criteria set for any custom profile.
  • Custom profile

    If the user meets the criteria defined by admin in any of the profiles, the client receives settings corresponding to that profile. Settings assigned to a profile are fetched after the user has authenticated to the store.

    Store URL configuration

    Note:

    Some settings are exclusive to a default profile. If configured, any user who is part of a custom profile inherits the values of such settings. For settings that are configurable via a custom profile, admins need to publish them for the profile for it to be applied.

Profile Limitations

Note:

  • You can create up to 20 configuration profiles.
  • You can add up to 10 user groups in a configuration profile.
  • You can add up to 10 device posture tags
  • You can add up to 10 network location tags
Introduction to profiles