Add docs for AllowedDomainsForApps

diff --git a/README.md b/README.md
index 32dceaf8d86b90a5435e982c038de9908bf9c625..40468226c800559f2fcb74f84f30807725aca8a3 100644 (file)
--- a/README.md
+++ b/README.md
@@ -7,6 +7,7 @@ Policies can be specified using the [Group Policy templates on Windows](https://
 | Policy Name | Description
 | --- | --- |
 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
 | Policy Name | Description
 | --- | --- |
 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.

+| **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.

 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.


@@ -147,6 +148,47 @@ Value (string):
   }
 }
 ```
   }
 }
 ```

+### AllowedDomainsForApps
+
+Define domains allowed to access Google Workspace.
+
+This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
+
+If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
+
+**Compatibility:** Firefox 89, Firefox ESR 78.11\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** N/A
+
+#### Windows (GPO)
+```
+Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
+```
+Value (string):
+```
+<enabled/>
+<data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
+```
+#### macOS
+```
+<dict>
+  <key>AllowedDomainsForApps</key>
+  <string>managedfirefox.com,example.com</string>
+</dict>
+```
+#### policies.json
+```
+{
+  "policies": {
+    "AllowedDomainsForApps": "managedfirefox.com,example.com"
+  }
+}
+```

 ### AppUpdateURL
 
 Change the URL for application update if you are providing Firefox updates from a custom update server.
 ### AppUpdateURL
 
 Change the URL for application update if you are providing Firefox updates from a custom update server.

diff --git a/mac/org.mozilla.firefox.plist b/mac/org.mozilla.firefox.plist
index 166c767a718b0c68f05fb3614c7e74d7d8832d9f..d354a0a1bd26c86c21a07cba100f2ac6a0c8d545 100644 (file)
--- a/mac/org.mozilla.firefox.plist
+++ b/mac/org.mozilla.firefox.plist
@@ -4,6 +4,8 @@
 <dict>
        <key>EnterprisePoliciesEnabled</key>
        <true/>
 <dict>
        <key>EnterprisePoliciesEnabled</key>
        <true/>

+       <key>AllowedDomainsForApps</key>
+       <string>managedfirefox.com,example.com</string>

        <key>AppAutoUpdate</key>
        <true/>
        <key>AppUpdateURL</key>
        <key>AppAutoUpdate</key>
        <true/>
        <key>AppUpdateURL</key>

diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml
index 3c7935797ce960df0b58ed21138d2d617a19f5d6..d527b49819d59c99dfa5cb9fd9b5c56ce3270f1a 100644 (file)
--- a/windows/de-DE/firefox.adml
+++ b/windows/de-DE/firefox.adml
@@ -842,6 +842,10 @@ For detailed information on creating the policy, see https://github.com/mozilla/
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.
+
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>

       <string id="Preferences_Boolean_Explain">Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt.
 
 Für eine Beschreibung der Einstellung, siehe:
       <string id="Preferences_Boolean_Explain">Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt.
 
 Für eine Beschreibung der Einstellung, siehe:

diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml
index f6791551751b2517e707064eaed1ea0ae82e74c9..ffc9685234ef3597b26083be28999e5b704551e6 100644 (file)
--- a/windows/en-US/firefox.adml
+++ b/windows/en-US/firefox.adml
@@ -843,6 +843,10 @@ For detailed information on creating the policy, see https://github.com/mozilla/
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.
+
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>

       <string id="Preferences_Boolean_Explain">If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false.
 
 For a description of the preference, see:
       <string id="Preferences_Boolean_Explain">If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false.
 
 For a description of the preference, see:

diff --git a/windows/es-ES/firefox.adml b/windows/es-ES/firefox.adml
index 21e58d8817feed29a6dd48d0efd140dd3d6e3758..2adc2e229dbd007dd1d8431c537127766c9bb413 100644 (file)
--- a/windows/es-ES/firefox.adml
+++ b/windows/es-ES/firefox.adml
@@ -843,6 +843,10 @@ For detailed information on creating the policy, see https://github.com/mozilla/
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.
+
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>

       <string id="Preferences_Boolean_Explain">Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false.
 
 Para una descripción de la preferencia, visita:
       <string id="Preferences_Boolean_Explain">Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false.
 
 Para una descripción de la preferencia, visita:

diff --git a/windows/firefox.admx b/windows/firefox.admx
index 18e5fe25bd01b859cfb4847b4d84599feb8af9c8..2852df4c5cda94a6d1dbc70a9006afc1f9cdd6a7 100644 (file)
--- a/windows/firefox.admx
+++ b/windows/firefox.admx
@@ -3722,26 +3722,33 @@
         <decimal value="0"/>
       </disabledValue>
     </policy>
         <decimal value="0"/>
       </disabledValue>
     </policy>

-    <policy name="Handlers" class="Both" displayName="$(string.Handlers)"  key="Software\Policies\Mozilla\Firefox" explainText="$(string.Handlers_Explain)"  presentation="$(presentation.Handlers)">">
+    <policy name="Handlers" class="Both" displayName="$(string.Handlers)" key="Software\Policies\Mozilla\Firefox" explainText="$(string.Handlers_Explain)" presentation="$(presentation.Handlers)">

       <parentCategory ref="firefox"/>
       <supportedOn ref="SUPPORTED_FF78"/>
       <elements>
         <multiText id="Handlers" valueName="Handlers"  maxLength="16384"/>
       </elements>
     </policy>
       <parentCategory ref="firefox"/>
       <supportedOn ref="SUPPORTED_FF78"/>
       <elements>
         <multiText id="Handlers" valueName="Handlers"  maxLength="16384"/>
       </elements>
     </policy>

-    <policy name="Preferences" class="Both" displayName="$(string.Preferences)"  key="Software\Policies\Mozilla\Firefox" explainText="$(string.Preferences_Explain)"  presentation="$(presentation.JSON)">">
+    <policy name="Preferences" class="Both" displayName="$(string.Preferences)"  key="Software\Policies\Mozilla\Firefox" explainText="$(string.Preferences_Explain)" presentation="$(presentation.JSON)">

       <parentCategory ref="firefox"/>
       <supportedOn ref="SUPPORTED_FF81"/>
       <elements>
         <multiText id="JSON" valueName="Preferences"  maxLength="16384"/>
       </elements>
     </policy>
       <parentCategory ref="firefox"/>
       <supportedOn ref="SUPPORTED_FF81"/>
       <elements>
         <multiText id="JSON" valueName="Preferences"  maxLength="16384"/>
       </elements>
     </policy>

-    <policy name="ManagedBookmarks" class="Both" displayName="$(string.ManagedBookmarks)"  key="Software\Policies\Mozilla\Firefox" explainText="$(string.ManagedBookmarks_Explain)"  presentation="$(presentation.JSON)">">
+    <policy name="ManagedBookmarks" class="Both" displayName="$(string.ManagedBookmarks)" key="Software\Policies\Mozilla\Firefox" explainText="$(string.ManagedBookmarks_Explain)" presentation="$(presentation.JSON)">

       <parentCategory ref="firefox"/>
       <supportedOn ref="SUPPORTED_FF83"/>
       <elements>
         <multiText id="JSON" valueName="ManagedBookmarks"  maxLength="16384"/>
       </elements>
     </policy>
       <parentCategory ref="firefox"/>
       <supportedOn ref="SUPPORTED_FF83"/>
       <elements>
         <multiText id="JSON" valueName="ManagedBookmarks"  maxLength="16384"/>
       </elements>
     </policy>

+    <policy name="AllowedDomainsForApps" class="Both" displayName="$(string.AllowedDomainsForApps)" key="Software\Policies\Mozilla\Firefox" explainText="$(string.AllowedDomainsForApps_Explain)" presentation="$(presentation.String)">
+      <parentCategory ref="firefox"/>
+      <supportedOn ref="SUPPORTED_FF89"/>
+      <elements>
+        <text id="String" valueName="AllowedDomainsForApps"/>
+      </elements>
+    </policy>

   </policies>
 </policyDefinitions>
   </policies>
 </policyDefinitions>

diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml
index 2d134b579796d65aefca4a664422c8b4536f0325..8d7e0c8bfab07514474b6f7a047b558cbfc68a9b 100644 (file)
--- a/windows/fr-FR/firefox.adml
+++ b/windows/fr-FR/firefox.adml
@@ -842,6 +842,10 @@ For detailed information on creating the policy, see https://github.com/mozilla/
 If this policy is disabled or not configured, managed bookmarks are not added.\r
 \r
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>\r
 If this policy is disabled or not configured, managed bookmarks are not added.\r
 \r
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>\r

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>\r
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.\r
+\r
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>\r

       <string id="Preferences_Boolean_Explain">Si cette stratégie est activée, la préférence est verrouillée sur true. Si cette stratégie est désactivée, la préférence est verrouillée sur false.\r
 \r
 Pour une description de la préférence, voir:\r
       <string id="Preferences_Boolean_Explain">Si cette stratégie est activée, la préférence est verrouillée sur true. Si cette stratégie est désactivée, la préférence est verrouillée sur false.\r
 \r
 Pour une description de la préférence, voir:\r

diff --git a/windows/it-IT/firefox.adml b/windows/it-IT/firefox.adml
index 8181e6d0d5df06a767e4d01a899f84713d2d16b6..e22fc1f7492a9ddf02219b1e62592d80c550d3a7 100644 (file)
--- a/windows/it-IT/firefox.adml
+++ b/windows/it-IT/firefox.adml
@@ -844,6 +844,10 @@ For detailed information on creating the policy, see https://github.com/mozilla/
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>
 If this policy is disabled or not configured, managed bookmarks are not added.
 
 For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks.</string>

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.
+
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>

       <string id="Preferences_Boolean_Explain">Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile.
 
 Per una descrizione della preferenza, si veda:
       <string id="Preferences_Boolean_Explain">Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile.
 
 Per una descrizione della preferenza, si veda:

diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml
index 198b0b018379d44543516b840907c79fc64f933a..1280dbfa2e6b67ad2ec5f1b124d46e49242d8822 100644 (file)
--- a/windows/ru-RU/firefox.adml
+++ b/windows/ru-RU/firefox.adml
@@ -843,6 +843,10 @@ If this policy is disabled or not configured, onboarding messages will be shown
 Если эта политика отключена или не настроена, управляемые закладки не добавляются.
 
 Для получения подробной информации о создании политики см. Https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks. </string>
 Если эта политика отключена или не настроена, управляемые закладки не добавляются.
 
 Для получения подробной информации о создании политики см. Https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks. </string>

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.
+
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>

       <string id="Preferences_Boolean_Explain"> Если эта политика включена, предпочтение заблокировано на true. Если эта политика отключена, предпочтение заблокировано на false.
 
 Описание предпочтения см .:
       <string id="Preferences_Boolean_Explain"> Если эта политика включена, предпочтение заблокировано на true. Если эта политика отключена, предпочтение заблокировано на false.
 
 Описание предпочтения см .:

diff --git a/windows/zh-CN/firefox.adml b/windows/zh-CN/firefox.adml
index f755aa2217fff80fe22e7f537e93efcbfc97d8a5..36550160d341c9b1d59ac1bf9f7b91fc377aca9f 100644 (file)
--- a/windows/zh-CN/firefox.adml
+++ b/windows/zh-CN/firefox.adml
@@ -841,6 +841,10 @@ If this policy is disabled or not configured, onboarding messages will be shown
 若禁用或不设定此原则，则不会加入受管理的书签。
 
 若需要建立原则的详细信息，请参考 https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks。 </string>
 若禁用或不设定此原则，则不会加入受管理的书签。
 
 若需要建立原则的详细信息，请参考 https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks。 </string>

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.
+
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>

    <string id="Preferences_Boolean_Explain">若启用此原则，偏好设定将锁定为 true。 若禁用此原则，偏好设定则锁定为false。
 
 若需要偏好设置的详细说明，请参考：
    <string id="Preferences_Boolean_Explain">若启用此原则，偏好设定将锁定为 true。 若禁用此原则，偏好设定则锁定为false。
 
 若需要偏好设置的详细说明，请参考：

diff --git a/windows/zh-TW/firefox.adml b/windows/zh-TW/firefox.adml
index eb1ce336cee6ff9163b02feba64736855211531b..1e1800dac6313ce647bbb1f4c684ab521faa2eee 100644 (file)
--- a/windows/zh-TW/firefox.adml
+++ b/windows/zh-TW/firefox.adml
@@ -841,6 +841,10 @@ If this policy is disabled or not configured, onboarding messages will be shown
 若停用或不設定此原則，則不會加入受管理的書籤。
 
 若需要建立原則的詳細資訊，請參考 https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks。</string>
 若停用或不設定此原則，則不會加入受管理的書籤。
 
 若需要建立原則的詳細資訊，請參考 https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks。</string>

+      <string id="AllowedDomainsForApps">Define domains allowed to access Google Workspace</string>
+      <string id="AllowedDomainsForApps_Explain">If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts.
+
+If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail.</string>

       <string id="Preferences_Boolean_Explain">若啟用此原則，偏好設定將鎖定為 true。若停用此原則，偏好設定則鎖定為 false。
 
 若需要偏好設定的詳細說明，請參考：
       <string id="Preferences_Boolean_Explain">若啟用此原則，偏好設定將鎖定為 true。若停用此原則，偏好設定則鎖定為 false。
 
 若需要偏好設定的詳細說明，請參考：