Skip to content
Teams & Enterprise

MDM Sign-In Enforcement

Enterprise Exclusive

Support for Enterprise features in Raycast for Windows has not yet been added. Contact us if you require these features in your organization.

Enforce that your organization members are logged in to their Raycast client with your organization's email. This is configured through an MDM (Mobile Device Management) configuration profile deployed by your IT team to managed Macs.

When the MDM profile is deployed with the RequiredSignInDomain key set to your organization's domain, Raycast will:

  • Block access to the client until the user logs in with an account matching the required domain (see image below).
  • Show an error if a user attempts to log in with an account from a different domain.
  • Disable the log out option to prevent users from bypassing the enforcement.
Raycast MDM sign-in enforcement screen

This is compatible with any MDM solution that supports managed preferences on macOS (e.g., Jamf, Kandji). The MDM profile is deployed by your IT team, Raycast respects the configuration when present. This follows Apple's standard managed app configuration framework.

This ensures that enterprise management settings configured in the Organization Settings are always applied, and prevents users from using Raycast outside of your organization's control.

Setup MDM Sign-In Enforcement

  1. Download template .mobileconfig file
    • Replace UNIQUE-UUID-1 and UNIQUE-UUID-2 with unique identifiers
    • Replace your-domain.com with your company's email domain (e.g., company.com, raycast.com)
  2. Create a new/custom Profile in your MDM
    • Upload the .mobileconfig file to the profile
    • Assign the appropriate target users or device that require this enforcement
  3. After deploying the profile, verify it's installed on managed devices:
    • On the macOS device, open System Settings → General → Device Management
    • Look for the "Raycast Required Sign-In Domain" profile in the list
    • The profile should appear under the MDM management section (similar to the screenshot below)
Device Management Settings for MDM Sign-In Enforcement

Configuration Reference

SettingValueDescription
PayloadDisplayNameAny stringHuman-readable name shown in System Settings
PayloadIdentifiercom.raycast.mdm.requiredsigninUnique identifier for the profile
PayloadUUIDUNIQUE-UUID-XUnique UUID (Universally Unique Identifier)
Bundle IDcom.raycast.macosRaycast's macOS application identifier
RequiredSignInDomainYour domain (e.g., company.com)Email domain users must use to sign in to Raycast
Chat with Raycast AISend Feedback