Skip to main content
Question

Platform SSO picking up shared user account

  • December 18, 2024
  • 2 replies
  • 38 views
Asifahmed
Forum|alt.badge.img+9

Hello All,

We implemented Platform SSO through JAMF to avoid repetitive username and password prompts again and again when accessing company resources. now the issue is that user is getting the shared account(Which he used before in outlook and now removed from outlook) populated when accessing any company resources, it is happening only after implementing Platform SSO. We clicked on 3 dots and clicked on to remove and forget option but no luck. Any idea to suppress these shared account not to be populated when accessing any company resources?

    2 replies

    AJPinto
    Forum|alt.badge.img+26
    • AJPinto
    • Legendary Contributor
    • December 18, 2024

    Is this for a single user? If so, you may want to try rebuilding their profile to force a reset on Office. You could also have a Configuration Profile preventing the removal of Outlook accounts.

     

    If this "shared account" is an IDP identity that multiple people are using to log in to Macs, I don't think you can prevent macOS from passing tickets for authentication with PSSO. This is essentially how PSSO is designed, it will automatically create tickets for whichever identity is logged into macOS.

    Have you tried disabling PSSO to see if the behavior changes? If disabling PSSO resolves the issue, it suggests that your current workflow is not compatible with PSSO.

     

     

    Asifahmed
    Forum|alt.badge.img+9
    • Asifahmed
    • Author
    • Contributor
    • December 20, 2024

    Is this for a single user? If so, you may want to try rebuilding their profile to force a reset on Office. You could also have a Configuration Profile preventing the removal of Outlook accounts.

     

    If this "shared account" is an IDP identity that multiple people are using to log in to Macs, I don't think you can prevent macOS from passing tickets for authentication with PSSO. This is essentially how PSSO is designed, it will automatically create tickets for whichever identity is logged into macOS.

    Have you tried disabling PSSO to see if the behavior changes? If disabling PSSO resolves the issue, it suggests that your current workflow is not compatible with PSSO.

     

     


    Till now problem came from one user only, I did not try with disabling the PSSO. User mentioned that after implementing PSSO it is coming.  User use only one account to log into the, these shared account are for different purpose, it is not mac user account account, it is outlook delegated email account.

    I asked to reset the Office package and see the behavior. Will let you know the result.

    Terms & ConditionsCookie settingsAccessibility statement