Sorry I think I need to clarify what content filter I was referring to. We use the com.apple.webcontent-filter on a supervised device and the we have the FilterType set to Plugin So how do I go about and retrive the password I have set in the payload of this profile on the device? /Cheers Kristofer

This is not typically the case for a Content Filter. What is the use case here? My use case is that I would like to use the supplied credentials from the configuration profile (Content Filter payload) to be used in the authentication process when calling external services. The external service needs authentication to be provided. When I use the filterConfiguration: NEFilterProviderConfiguration in my NEFilterControlProvider class, it the contains a passwordReference and from what I understand this reference just points to a value of a password stored in a keychain. Now I would like to know which keychain it is, and if I need special entitlements to read from it. Or have I misunderstood the documentation? My goal is to create URLCredentials to be used in URLSession calls. My NEFilterControlProvider should be able to call services with the supplied credentials from the configuration profile. So I don't want to use the VPN stuff, I just can't find any documentation with where the credential payload is stored in the context of a Content Filter profile payload. /Cheers Kristofer