Do you only want to block some specific engines or block Sync completely? There is a DisableFirefoxAccounts policy available to disable Sync.

• https://github.com/mozilla/policy-templates/blob/master/README.md

I will move the thread to Firefox for Enterprise support.

Hi, Thanks for your answer. Want we are looking for is a confg profile to block all the sync options, as I said, the users can login using an email but then, they can't sync bookmarks, passwords, etc.

Regards, Jesus

What's the purpose of allowing them to login if you don't want them to sync anything?

Hi, The idea is to deploy this configuration to Chrome, Edge and Firefox, for the first 2 is already in place and working, and the purpose is the user can login and access to their emails but can't sync the bookmarks, password etc for security reasons (I know, it's a silly solution) but I don't take these decisions.

Regards, Jesus

The only reason for logging in to Firefox Account is to synchronize data.

You can use the DisableFirefoxAccounts policy. It doesn't disable their emails or anything.

I'm trying different ways but I can't make it work. I'm using <dict>

 <key>DisableFirefoxAccounts</key>
 <true/>

</dict>

Do I need to add more info/keys?

Yes on macOS, you need to add EnterprisePoliciesEnabled as well:

https://github.com/mozilla/policy-templates/blob/master/README.md#enterprisepoliciesenabled

I'll update the docs here

https://github.com/mozilla/policy-templates/tree/master/mac

to make that clear.

For some reason is not working.

<dict> <key>PayloadContent</key> <dict> <key>org.mozilla.firefox</key> <dict> <key>EnterprisePoliciesEnabled</key> <true/> <key>DisableFirefoxAccounts</key> <true/> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>xxx</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>xxx</string> <key>PayloadVersion</key> <integer>1</integer> </dict>

I'm not familiar with that format.

I normally use this:

https://github.com/timsutton/mcxToProfile

to convert the plist to a mobileconfig and it's a binary file.