The SSO Redirect and Kerberos extension types can both be used on a device at the same time. The Microsoft Enterprise SSO plug-in uses the SSO Payload Type with Redirect authentication. The SSO app extension is designed to improve the sign-in experience for apps and websites that use these authentication methods. In Jamf Pro, when you use the SSO app extension, you use the SSO or Kerberos Payload Type for authentication. Jamf Pro and Intune integration for device compliance is not required to use the SSO app extension. The app just need to be installed on the device. Users don't need to use the Authenticator or Company Portal apps. On Apple devices, Apple requires that the SSO app extension and the app (Authenticator or Company Portal) be installed. #JAMF PRO SSO AZURE HOW TO#For a list of options on how to install the Company Portal app, see Jamf Pro's documentation. The Company Portal app can be installed manually by users, or by deploying the app through Jamf Pro. On macOS 10.15 and newer devices, install the Company Portal app. For information on how to install the Microsoft Authenticator app, see Jamf Pro's documentation. The Microsoft Authenticator app can be installed manually by users, or by deploying the app through Jamf Pro. On iOS/iPadOS 13.0 and newer devices, install the Microsoft Authenticator app. To use the Microsoft Enterprise SSO plug-in for Apple devices: Supplemental Terms of Use for Microsoft Azure Previews.Certain features might not be supported or might have restricted behavior. It's not recommended to use in production. This preview version is provided without a service level agreement (SLA). The Microsoft Enterprise SSO plug-in for Apple Devices is in public preview. This article shows how to deploy the Microsoft Enterprise SSO plug-in (preview) for Apple Devices with Jamf Pro. They can bypass interactive sign-in prompts for the signed in user.įor more information, see Microsoft Enterprise SSO plug-in for Apple devices - apps that don't use MSAL. Just add the application bundle ID or prefix to the extension configuration.įor example, to allow a Microsoft app that doesn't support MSAL, add com.microsoft. Apps that don't support MSAL can be allowed to use the extension. Once set up, apps that support the Microsoft Authentication Library (MSAL) automatically take advantage of the Microsoft Enterprise SSO plug-in (preview). It reduces the number of authentication prompts users get when using devices managed by Mobile Device Management (MDM), including Jamf Pro. This plug-in uses the Apple single sign-on app extension framework. #JAMF PRO SSO AZURE MAC#If you're interested in sponsoring the Mac Admins Podcast, please email for more information.The Microsoft Enterprise SSO plug-in (preview) provides single sign-on (SSO) to apps and websites that use Microsoft Azure Active Directory (Azure AD) for authentication, including Microsoft 365.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |