Adjusting Safari security settings to support the Intellischool app

To ensure Intellischool login works correctly in Safari, schools can selectively disable Safari’s “Prevent Cross-Site Tracking” setting using Jamf Pro (or another MDM).

This setting is controlled via a configuration profile.

What you're changing

Safari setting:

• "Prevent Cross-Site Tracking" -> OFF (for Intellischool sites only)

This allows cookies between:

• intellischool.app (the main Intellischool app), and
• intellischool.id (our authentication platform)

Jamf Pro configuration

This guide assumes some familiarity with Jamf Pro. If you're unsure, please reach out to your IT team for assistance.

In the Jamf Pro interface:

1. Create a configuration profile - either computer or device, depending on your needs.
2. Give the profile a useful name, and set the scope appropriately.
3. Open Application & Custom Settings.
4. Choose External Applications.
5. Set Source to "Custom Schema".
6. Set the Preference Domain to com.apple.domains.
7. Paste the JSON schema (included below) into the box.
8. Ensure that the following domains are included in the list:
   • intellischool.app
   • intellischool.id
9. Save and distribute the profile.

JSON schema

{
  "title": "Apple Domains Payload (com.apple.domains)",
  "description": "Domains payload settings for Safari cross-site tracking relaxed domains.",
  "type": "object",
  "properties": {
    "CrossSiteTrackingPreventionRelaxedDomains": {
      "title": "Cross-Site Tracking Relaxed Domains",
      "description": "Up to 10 bare domains. Subdomains are included automatically.",
      "property_order": 10,
      "type": "array",
      "maxItems": 10,
      "items": {
        "title": "Domain",
        "type": "string",
        "pattern": "^(?!\\*|https?:\\/\\/)(?=.{1,253}$)(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?\\.)+[A-Za-z]{2,63}$"
      },
      "options": {
        "infoText": "Examples: intellischool.app, intellischool.id"
      }
    }
  }
}