Configure an Identity Preference profile to specify which SSL client certificate to be used by device users when accessing specified urls, emails, or domains through web app Safari. For example, if there are three SSL client certificates, and you always need to use a particular one to connect to, then you can add an identity preference for and select the client certificate you want to use.

Identity preference profile is available for macOS 10.12. When the profile gets installed, the certificate and corresponding Identity Preference get seated on the device. In a profile, you can add multiple Identity preference payloads as needed.


If no SSL client certificates are used to identify secure sites, then no need to set an identity preference.

To create an identity preference profile:

  1. Navigate to Devices > Profiles & Resources > Profiles and select Add then Add Profile. Select Apple macOS, and then select User Profile, because this profile is only applicable to the enrollment user of the device.
  2. Configure the profile's General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  3. Select the Identity Preference payload.
  4. Enter the email address, DNS hostname, or other location (URL) that requires certificate in the Location or Email Address text box.
  5. Select the preferred Identity Certificate for the specified location or address.
  6. Select Save & Publish when you are finished to push the profile to the devices.