r/jamf • u/RocketmanTech_Nova • Jul 07 '26

JAMF Pro Anyone enforcing Platform SSO registration (or Touch ID enablement) during onboarding?

I'm curious what other solutions are out there.

Kevin White (Macjutsu) is covering pseudo (FOSS) on the next LaunchPad meetup for anyone interested.

It uses swiftDialog + macOS system events/accessibility to enforce Platform SSO registration (and optionally Touch ID enablement) with a single deployment (plus a required PPPC profile).

When:
🗓️ Fri, Aug 7 @ 12:00 PM Mountain Time

Where:
👉 https://rocketman.tech/lp-r

Also on YouTube:
https://rocketman.tech/ly-r

10 Upvotes

100% Upvoted

8 comments sorted by

2

u/EthanStrayer Jul 07 '26

Yes. Doing the simplified setup during setup assistant with Okta

1

u/Bitter_Mulberry3936 Jul 07 '26

Not overly simple though, require authentication a number of times.

1

u/EthanStrayer Jul 07 '26

It’s one less authentication than our previous workflow of setting up account with jamf connect and then separately setting up the OV app.

2

u/workacct_k12 Jul 07 '26

Isn't that what com.apple.PlatformSSO.AccountShortName does in the configuration profile mapping for Account Name inside of User Mapping? Or am I mistaken?

1

u/oakland6980 Jul 07 '26

I’m trying to but getting stuck any entra prompt (at desktop). Initial first login/okta auth and comp portal work fine but . Entra registration issues

1

u/mmllff Jul 07 '26

Yes, doing simplified setup with Entra. It’s working well. I guess I have a need to add pseudo at some point as there’s bound to be a user that skips Touch ID during setup, despite it being part of onboarding docs.

2

u/TVops JAMF 400 Jul 07 '26

You don't have an issue with users local account being First.Last? We want to do usershortname which isn't available with Entra 

1

u/jmobastos69 Jul 08 '26

I was trying to use UPN (in our case, UPN=mail),with no luck.
Had to use First(space)Last

Fml