{
  "_comment": "Declarative Device Management: the app.managed configuration plus the assets it references. The data asset (remotenx-config.plist) is sample-org.json converted to a property list: plutil -convert xml1 sample-org.json -o remotenx-config.plist. ServerToken values are placeholders your MDM fills in.",
  "declarations": [
    {
      "Type": "com.apple.configuration.app.managed",
      "Identifier": "internal.example.remotenx.app",
      "ServerToken": "1",
      "Payload": {
        "AppStoreID": "0000000000",
        "InstallBehavior": {
          "Install": "Required",
          "License": {
            "Assignment": "Device"
          }
        },
        "AppConfig": {
          "DataAssetReference": "internal.example.remotenx.config",
          "Certificates": [
            {
              "Identifier": "example-root-ca",
              "AssetReference": "internal.example.root-ca"
            }
          ],
          "Identities": [
            {
              "Identifier": "ssh-ops-identity",
              "AssetReference": "internal.example.ssh-ops-scep"
            },
            {
              "Identifier": "vdi-client-identity",
              "AssetReference": "internal.example.vdi-client"
            }
          ],
          "Passwords": [
            {
              "Identifier": "gateway-service-password",
              "AssetReference": "internal.example.gateway-service"
            }
          ]
        }
      }
    },
    {
      "Type": "com.apple.asset.data",
      "Identifier": "internal.example.remotenx.config",
      "ServerToken": "1",
      "Payload": {
        "Reference": {
          "DataURL": "https://mdm.example.internal/assets/remotenx-config.plist",
          "ContentType": "application/x-plist"
        }
      }
    },
    {
      "Type": "com.apple.asset.credential.certificate",
      "Identifier": "internal.example.root-ca",
      "ServerToken": "1",
      "Payload": {
        "Reference": {
          "DataURL": "https://mdm.example.internal/assets/example-root-ca.cer",
          "ContentType": "application/pkix-cert"
        }
      }
    },
    {
      "Type": "com.apple.asset.credential.scep",
      "Identifier": "internal.example.ssh-ops-scep",
      "ServerToken": "1",
      "Payload": {
        "Reference": {
          "DataURL": "https://mdm.example.internal/assets/ssh-ops-scep.json",
          "ContentType": "application/json"
        }
      }
    },
    {
      "Type": "com.apple.asset.credential.identity",
      "Identifier": "internal.example.vdi-client",
      "ServerToken": "1",
      "Payload": {
        "Reference": {
          "DataURL": "https://mdm.example.internal/assets/vdi-client.json",
          "ContentType": "application/json"
        }
      }
    },
    {
      "Type": "com.apple.asset.credential.userpassword",
      "Identifier": "internal.example.gateway-service",
      "ServerToken": "1",
      "Payload": {
        "Reference": {
          "DataURL": "https://mdm.example.internal/assets/gateway-service.json",
          "ContentType": "application/json"
        }
      }
    }
  ]
}