{
    "properties": {
        "OnDemandMatchAppEnabled": {
            "description": "This key is placed in the VPN payload sub-dictionary.\n                    If true, the Per-App VPN connection starts automatically when apps linked to this Per-App VPN service initiate network communication.\n                    If false, the Per-App VPN connection must be started manually by the user before apps linked to this Per-App VPN service can initiate network communication.\n                    If this key is not present, the value of the OnDemandEnabled key is used to determine the status of Per-App VPN On Demand.\n                ",
            "type": "boolean"
        },
        "PayloadDescription": {
            "default": "Per-App VPN Payload",
            "description": "Description of the payload",
            "type": "string"
        },
        "PayloadDisplayName": {
            "default": "Per-App VPN Payload",
            "description": "Name of the payload",
            "type": "string"
        },
        "PayloadIdentifier": {
            "default": "com.apple.vpn.managed.applayer",
            "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
            "type": "string"
        },
        "PayloadOrganization": {
            "description": "This value describes the issuing organization of the profile, as displayed to the user",
            "type": "string"
        },
        "PayloadType": {
            "default": "com.apple.vpn.managed.applayer",
            "description": "The type of the payload, a reverse dns string",
            "type": "string"
        },
        "PayloadUUID": {
            "default": "",
            "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadVersion": {
            "default": 1,
            "description": "The version of the whole configuration profile.",
            "type": "number"
        },
        "SafariDomains": {
            "description": "This optional key is a special case of App-to-Per App VPN Mapping. It sets up the app mapping for Safari (Webkit) with a specific identifier and a designated requirement. The array contains strings, each of which is a domain that should trigger this VPN connection in Safari.",
            "items": {
                "description": "A domain or partial domain name that should trigger this connection",
                "type": "string"
            },
            "type": "array"
        },
        "VPNUUID": {
            "description": "A globally-unique identifier for this VPN configuration. This identifier is used to configure apps so that they use the Per-App VPN service for all of their network communication.",
            "type": "string"
        }
    },
    "title": "com.apple.vpn.managed.applayer",
    "type": "object"
}