Configuration Profile

An XML-based file (typically .mobileconfig) containing one or more payloads that configure settings and policies on Apple devices. Profiles can be scoped to device or user level.

What to Know

Configuration profiles are the primary mechanism for deploying and enforcing settings across managed Apple devices at scale. They enable consistent, centralized configuration of security policies, network settings, device restrictions, and application behaviors without requiring manual setup on each device. Profiles ensure compliance by enforcing policies that users cannot easily modify or bypass, and they can be remotely updated or removed as organizational needs change.

From a security perspective, configuration profiles provide a standardized, auditable method for implementing organizational policies. They create a clear separation between user preferences and administrator-enforced settings, reducing the risk of misconfiguration and ensuring that critical security controls remain in place even if users attempt to modify device settings.

Common Scenarios

Enterprise IT: Deploying Wi-Fi credentials, VPN configurations, email account settings, and security policies across corporate devices. Configuration profiles ensure new employees receive standardized device configurations and that security policies are uniformly applied across all departments.

MSP: Managing multiple client environments with different policy requirements using scoped profiles. MSPs leverage profiles to deliver client-specific configurations, implement security baselines, and demonstrate compliance with industry regulations during audits.

Education: Configuring classroom devices with content filtering, app restrictions, shared iPad settings, and managed Apple IDs. Profiles enable IT teams to prepare student devices for specific learning environments and academic programs with minimal hands-on configuration.

In Addigy

Addigy organizes configuration profiles through the Catalog and Policies sections, allowing admins to build profiles using a visual interface rather than editing raw XML. Profiles can be scoped to specific devices, Smart Groups, or organizational units, and Addigy automatically handles profile installation, updates, and removal based on Smart Group membership changes. Addigy displays profile installation status for each device and provides troubleshooting logs when profiles fail to install.

When creating custom profiles in Addigy, admins can upload .mobileconfig files directly or use built-in templates for common payloads. Addigy validates profiles before deployment and identifies potential conflicts with existing configurations, preventing common deployment errors that could leave devices in an inconsistent state.