# Configure Associated Domains on macOS devices

This document helps you to configure associated domains using Hexnode.

Apple’s **Associated Domains** establishes a secure connection between a macOS application and it’s associated web domains, enabling the app to safely interact with verified websites. This connection enables various advanced features such as universal links, password autofill, extensible app SSO and more. These features provide a seamless and secure experience by allowing apps to open specific web content, autofill credentials, or handle authentication requests directly from trusted websites. Hexnode UEM lets you remotely configure associated domains on managed macOS devices, enabling secure app-to-website interactions.

 Note: 
To associate a website with your app, the associated domain file must be hosted on your website, and your app must include the corresponding entitlement. The domains specified in the apple-app-site-association file on your website must align with the Associated Domains entitlement in your app.

 

Configure Associate Domains
---------------------------

1. On your Hexnode UEM console, navigate to the **Policies** tab.
2. Choose an existing policy or create a new policy by clicking on **New Policy**. Provide a suitable **name** and **description** (optional).
3. Select **Associated Domains** from **macOS > Configurations**.
4. Click **Configure** to configure the associated domains.
5. Click on **+Add Associated Domains**, and in the **Add Associated Domains** window, configure the following options: 
    - **App Identifier:**
         Specify the app identifier in the format **Team ID.Bundle ID**. The **Team ID** is a
         unique 10-character alphanumeric string assigned by Apple to a developer account, while the **Bundle
         ID** is the unique identifier of the app within that account.
         For example, the app identifier for Microsoft Teams is: UBF8T346G9.com.microsoft.teams2
    - **Domains:**
         Enter domain values in the format **service:domain**. The domain name must be a fully qualified domain
         name, such as www.example.com. Use prefix ***.** to allow association with all subdomains of a
         domain.
         For example, use applinks:*.example.com to include all subdomains. After entering the domain(s), click
         **+Add** to include them.
    - **Enable direct download:**
         Enable this option to allow direct download of data. Instead of using Apple’s CDN server, the data will be downloaded
         from the primary server of the specified domain.

Associate the policy with target entities
-----------------------------------------

If you haven’t saved the policy,

1. Navigate to **Policy Targets**.
2. Select the required **Devices, Users, Device Groups, User Groups** or **Domains**.
3. Click on **Save**.

If you have already saved the policy,

1. Navigate to **Policies > My Policie**s and select the required policy.
2. Click on **Manage > Associate Targets**.
3. Select the required **Devices, Users, Device Groups, User Groups** or **Domains**.
4. Click on **Associate**.

What happens at the device end?
-------------------------------

The **Associated Domains** policy gets configured on the device end. Once the policy is applied, apps configured with the correct entitlement and domain association can use advanced features like universal links and SSO.

[![Configured Associated Domains policy on macOS device.](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2024/03/Configured-Associated-Domains-policy.png)](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2024/03/Configured-Associated-Domains-policy.png "Configured Associated Domains policy")