Introducing Platform Single Sign on for macOS with Microsoft Intune

Enrolling macOS devices with Microsoft Intune just got easier. With Platform Single Sign-on capabilities, users need a single credential for their device and access to corporate resources.
-------------------------------------------------------------------------------------------------------------------------------
👉 Keep up with the latest news: aka.ms/IntuneForMac
🔎 See all capabilities in Microsoft Intune for Mac: aka.ms/IntuneForMacDocs

[@jeremytapay6611]

I have a question regarding Mac computer login. How can users log in using their Entra ID on existing Mac devices? Is it necessary for everything to go through Autopilot, or is there an alternative method?

[@phylum8975]

Hi Team this is great news. Even though the FileVault screen is set to show in Setup Assistant, it does not show during the process. Is there some sort of prerequisite for that?

[@hristobochev987]

Finally !

[@David-es9rl]

Why is the "local account" screen necessary if the password gets synced anyways.
This was the main thing I was hoping to get rid of..

[@nickcowley7831]

Unfortunately this is a Apple macOS requirement, no way to bypass. Alos this is happening before the password sync is initiated due to the way macOS builds

[@jonnokid]

PSSO requires a local account for the first identity to sync to, there is no way around that currently.

[@michaelepping1]

Its how macOS works today, I'd recommend providing feedback to Apple if your organization has contacts with them.

[@seanyboy3]

You still need it because the sync doesn't happen until after the local account creation point in the setup assistant process. It's the company portal app I believe that helps drive the process.

[@MichaelRubino-wp8sk]

Will this work in a lab environment where you have various students logging into the same Macs?

[@ThatGamerPhantom]

I have this question as well. Tested successfully here in a school setting but if its only good for one account then its terrible in a multi user environment

[@nickcowley7831]

No, really only for one user, one device. Similar to Windows autopilot

[@jonnokid]

PSSO supports shared device, we're currently working on a video and some instructions for that scenario too.

[@michaelepping1]

Yes, you can configure it to support multi-user devices where anyone from the Entra ID tenant can log in. This does require macOS Sonoma though, it doesn't work in Ventura.

[@branimirmatovic3620]

Is Platform SSO available with a BYOD enrollment of Macbooks?

[@nickcowley7831]

No, only with ABM

[@marcnahum]

yes it is

[@jonnokid]

yes

[@michaelepping1]

Yes, the enrollment type doesn't matter for PSSO. It can be deployed via MDM regardless of enrollment type, but MDM management is always required.

[@JeanNeves-sy5hk]

I'm getting issues with the user account being populated by the Entra ID automátic and the to register the device. Company portal is not prompting