Complete Platform SSO registration during macOS Automated Device Enrollment
On macOS devices enrolled with Automated Device Enrollment (ADE), you can run Platform SSO during device registration. Before you enroll, you:
- Create an Intune settings catalog policy and configure the Enable Registration During Setup setting.
- Deploy the Company Portal (5.2604.0 and newer) as a line-of-business app.
- Configure the Automated Device Enrollment policy to use Setup Assistant with modern authentication and enable await final configuration.
When this feature is enabled, users have access to Microsoft Entra ID resources immediately when they arrive at desktop.
To learn more, see Configure Platform Single Sign-On (PSSO) during Automated Device Enrollment for macOS devices.
Applies to
- macOS 26 and newer
- Company Portal 5.2604.0 and newer
Terms in this update
- Device enrollmentDevice enrollment is the process by which a laptop, phone or tablet comes under management of Microsoft Intune.…
- SSOSingle sign-on (SSO) means a user signs in once and then reaches multiple applications without signing in again.…
- Microsoft IntuneMicrosoft Intune is Microsoft's cloud service for managing and securing laptops, phones and tablets and the apps on…
- Microsoft Entra IDMicrosoft Entra ID is Microsoft's cloud identity and access service, formerly Azure Active Directory. It holds users, groups…
This is in the weekly digest for week 39 · What changed this week? →
More Intune updates
Automatically launch Microsoft Defender for Endpoint during Android Enterprise device setup
Skip new Apple Setup Assistant panes during enrollment
Dedicated RBAC permission for zero-touch enrollment
Skip Setup Assistant screens for tvOS and visionOS enrollment
Enrollment time grouping for new Apple ADE enrollment policies generally available
Access management for Apple services
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
