From b6f7efe164452c63ff6cbcb1ea69f29530e38f69 Mon Sep 17 00:00:00 2001
From: Roberto Dip <me@roperzh.com>
Date: Fri, 18 Nov 2022 11:25:44 -0300
Subject: [PATCH] add <PayloadOrganization> to MDM enrollment payload (#8752)

The value of this attribute is used by macOS in "System Preferences >
Profiles" to display a note saying "This Mac is supervised and managed
by <xyz>".

When <PayloadOrganization> is not set, it uses the URL of the MDM server
for the message, which looks unpolished.
---
 server/service/apple_mdm.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/server/service/apple_mdm.go b/server/service/apple_mdm.go
index 8e47ff6989..6186f9ec5b 100644
--- a/server/service/apple_mdm.go
+++ b/server/service/apple_mdm.go
@@ -752,6 +752,8 @@ var enrollmentProfileMobileconfigTemplate = template.Must(template.New("").Parse
 	<string>{{ .Organization }} Enrollment</string>
 	<key>PayloadIdentifier</key>
 	<string>com.fleetdm.fleet.mdm.apple</string>
+	<key>PayloadOrganization</key>
+	<string>{{ .Organization }}</string>
 	<key>PayloadScope</key>
 	<string>System</string>
 	<key>PayloadType</key>