// Code generated by msgraph.go/gen DO NOT EDIT.
package msgraph
// KerberosSingleSignOnExtension undocumented
type KerberosSingleSignOnExtension struct {
// SingleSignOnExtension is the base model of KerberosSingleSignOnExtension
SingleSignOnExtension
// Realm Gets or sets the case-sensitive realm name for this profile.
Realm *string `json:"realm,omitempty"`
// Domains Gets or sets a list of hosts or domain names for which the app extension performs SSO.
Domains []string `json:"domains,omitempty"`
// BlockAutomaticLogin Enables or disables Keychain usage.
BlockAutomaticLogin *bool `json:"blockAutomaticLogin,omitempty"`
// CacheName Gets or sets the Generic Security Services name of the Kerberos cache to use for this profile.
CacheName *string `json:"cacheName,omitempty"`
// CredentialBundleIDAccessControlList Gets or sets a list of app Bundle IDs allowed to access the Kerberos Ticket Granting Ticket.
CredentialBundleIDAccessControlList []string `json:"credentialBundleIdAccessControlList,omitempty"`
// DomainRealms Gets or sets a list of realms for custom domain-realm mapping. Realms are case sensitive.
DomainRealms []string `json:"domainRealms,omitempty"`
// IsDefaultRealm When true, this profile's realm will be selected as the default. Necessary if multiple Kerberos-type profiles are configured.
IsDefaultRealm *bool `json:"isDefaultRealm,omitempty"`
// PasswordBlockModification Enables or disables password changes.
PasswordBlockModification *bool `json:"passwordBlockModification,omitempty"`
// PasswordExpirationDays Overrides the default password expiration in days. For most domains, this value is calculated automatically.
PasswordExpirationDays *int `json:"passwordExpirationDays,omitempty"`
// PasswordExpirationNotificationDays Gets or sets the number of days until the user is notified that their password will expire (default is 15).
PasswordExpirationNotificationDays *int `json:"passwordExpirationNotificationDays,omitempty"`
// UserPrincipalName Gets or sets the principle user name to use for this profile. The realm name does not need to be included.
UserPrincipalName *string `json:"userPrincipalName,omitempty"`
// PasswordRequireActiveDirectoryComplexity Enables or disables whether passwords must meet Active Directory's complexity requirements.
PasswordRequireActiveDirectoryComplexity *bool `json:"passwordRequireActiveDirectoryComplexity,omitempty"`
// PasswordPreviousPasswordBlockCount Gets or sets the number of previous passwords to block.
PasswordPreviousPasswordBlockCount *int `json:"passwordPreviousPasswordBlockCount,omitempty"`
// PasswordMinimumLength Gets or sets the minimum length of a password.
PasswordMinimumLength *int `json:"passwordMinimumLength,omitempty"`
// PasswordMinimumAgeDays Gets or sets the minimum number of days until a user can change their password again.
PasswordMinimumAgeDays *int `json:"passwordMinimumAgeDays,omitempty"`
// PasswordRequirementsDescription Gets or sets a description of the password complexity requirements.
PasswordRequirementsDescription *string `json:"passwordRequirementsDescription,omitempty"`
// RequireUserPresence Gets or sets whether to require authentication via Touch ID, Face ID, or a passcode to access the keychain entry.
RequireUserPresence *bool `json:"requireUserPresence,omitempty"`
// ActiveDirectorySiteCode Gets or sets the Active Directory site.
ActiveDirectorySiteCode *string `json:"activeDirectorySiteCode,omitempty"`
// PasswordEnableLocalSync Enables or disables password syncing. This won't affect users logged in with a mobile account on macOS.
PasswordEnableLocalSync *bool `json:"passwordEnableLocalSync,omitempty"`
// BlockActiveDirectorySiteAutoDiscovery Enables or disables whether the Kerberos extension can automatically determine its site name.
BlockActiveDirectorySiteAutoDiscovery *bool `json:"blockActiveDirectorySiteAutoDiscovery,omitempty"`
}