Create an iOS/iPadOS CardDAV Policy

This policy remotely configures and deploys contact synchronization settings to managed Apple iOS devices, ensuring users have seamless access to corporate address books. By automating this configuration, you can enhance organizational productivity and maintain a standardized, secure environment for managing sensitive contact information.

Prerequisites

• iOS/iPadOS devices must be enrolled in Apple MDM with the following enrollment type:
  • Device-Enrolled Devices - These devices are owned by the corporation, and enrolled by the admin or by the user.
  • User-Enrolled Devices - These are personal devices used for work where the user enrolls the device to securely access corporate data while maintaining personal privacy.
  • Auto-Enrolled Devices - These devices are owned and enrolled by the corporation through Automated Device Enrollment.
    For more information, see MDM Enrollment Method.
• A valid CardDAV server URL and user credentials must be available for the configuration to establish a successful network connection.
• Target devices must be running iOS/iPadOS 4 or later.

Creating the Policy

To create the policy:

1. Log in to the JumpCloud Admin Portal.

2. Go to Device Management > Policy Management and click (+).
3. On the New Policy panel, select the iOS tab.
4. Search and select CardDAV Account from the list, then click configure.
5. (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
6. (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.
7. Configure the following policy settings:
   • Account Description - Enter a short description for your account.
   • Account Hostname (Required) - Enter the server address for your contacts. 
   • Account Username - Enter the unique ID or email address you use to log in to your contact service.
   • Account Password - Enter your account service password. 
   • Principal URL - Provide the specific web path to your address book. This helps the device find exactly where your contacts are stored on the server.
   • Use SSL - Keep this enabled (set to "True") to ensure your contact data is encrypted and secure while being sent over the network.
   • Port Number - Specify the communication port for the server. If left blank, the device usually selects the standard default.
   • Default App for Audio Calls - You can define which apps can access the contact account and specify which one is the default for making audio calls.
   • VPNUUID - Enter the VPNUUID of the per-app VPN the account uses for network communication. This is available in iOS 14 and later.
8. (Optional) Select the Device Groups tab. Select one or more device groups where you want to apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
9. (Optional) Select the Devices tab. Select one or more devices where you want to apply this policy.
10. Click Save. If prompted, click Save again. The policy configuration settings are applied automatically and do not require a system restart.