5.2.8214 (Jan 27, 2025)

Command Line Interface

Use to set up RFID or to set local admin for password reset.

sudo /Applications/XCreds.app/Contents/MacOS/XCreds -h

RFID Authentication

Add support for signing in with an RFID tag. Use the XCreds command line interface to map RFID values to existing or new user accounts. Or optionally allow users to register a new RFID tag to their account when signing in at the XCreds login screen. See more information about how to configure RFID for XCreds.

Local Admin

Set an existing macOS admin for a password reset using the XCreds command line interface.

Multiple Active Directory Domains

Use the new preference key AdditionalADDomains to add support for additional Active Directory domains.

Active Directory Domain Mapping

Use the new preference key upnSuffixToDomainMappings to allow XCreds to map one Active Directory domain to another for certain sign-in scenarios.

In some Active Directory environments, users do not use username@domain to login; they use a UPN suffix to make the username easier to use. This setting maps the UPN suffix to the correct AD domain name. For example, if you have an AD domain of foo.com but want users to sign in as [email protected], a UPN suffix of foo.com is created in AD and the user account is set to [email protected]. This setting then would map foo.com to bar.com by setting the key upn to foo.com and the domain key to bar.com.

New Preference Keys

• ccidSlotName
• shouldSuppressLocalPasswordPrompt
• AdditionalADDomains
• upnSuffixToDomainMappings

Other Fixes and Changes

Fix an issue that was causing a laptop built-in screen to remain black after waking from sleep on the XCreds login screen while connected to an external monitor as the primary display.

Profiles and Manifest

Sample Manifest
Sample Profiles

Commits

• added rfid View
• added rfid View
• wip View
• wip View
• added user db View
• added new mech to read from user db View
• cleanup View
• fixed issue with nsarchive class names View
• implemented rfid user and local admin hints View
• added login with rfid and local admin keychain overide with secure users View
• added uid and full name to RFID login View
• wip View
• bumped to 5.2 View
• added -r to allow registering of CTK extension as root View
• updated rfid user passwords and updated network up test code View
• cleaned up login window switching (mac native to xcreds) View
• added command line rfid tools View
• removed debug output View
• added command line status output View
• WIP View
• added subdomain support View
• added sample profile View
• cleaned up sample profile View
• updated build number View
• fixed kerberos ticket for subdomain View
• added upn mapping and sample profile View
• added ability to setup card login View
• card login View
• local admin in new security db View
• issue #287 Add AdditionalADDomains to manifest and issue #290 Checkbox for Offline Authentication needs association with label View
• Typo in CLI help description #283 View
• Update manifest with min version info for new keys #284 View
• Add command line option for clear single user #286 View
• wip View
• Resolve issue with secrets.bin file #285 View
• mailto: links in XCreds menu #282 View
• added error message when inserting to wrong reader View
• added setting pin fix for rfid card View
• added Auth0 sample profile View
• typo fixed View
• made provisioning login card dynamic View
• Typo in manifest for shouldAllowLoginCardSetup #296 View
• Typo in description for upnSuffixToDomainMappings #295 View
• Error parsing some csv files for cli user import #293 View
• Typo in description for upnSuffixToDomainMappings #295 View
• Show/hide "Setup Login Card" checkbox #292 View
• added more command line options; added more status update options View
• cleaned up cli output View
• changed target name View
• Fixes for command line output #298 View
• fixed issue with blank screen with multiple monitors; added background to multiple display setup View