Single Sign-On Mac and iPads?

Are you using JAMF Connect or PSSO?

If you’re using either one of those with MS Entra, then having a TGT (via company portal) for that user and using the SSOe, you can specify the domains that respond to SSO in the plist for the SSOe. Are you wanting to use kerb for on prem bindings?  Would also be curious of your use case of binding to on prem AD as well…
 

If none of what I said is making sense, then check out this document from MS. You may have to filter for JAMF: https://learn.microsoft.com/en-us/intune/device-configuration/templates/configure-enterprise-sso-plugin-macos?tabs=prereq-jamf-pro%2Ccreate-profile-intune

We don’t use either Jamf Connect or PSSO.

Then you’re going to be extremely hard pressed to get SSO working.  The primary thing is to have a validated IdP to provide to the SSOe.  

What is your IdP?

For iPads see this article:

https://learn.jamf.com/r/en-US/jamf-setup-reset-configuration-guide/Overview

Well, we do have it working with the “dark side” through Intune with our local IdP. Our local IdP is synchronizing with Entra. 

It would be ideal to get PSSO enabled, it’s a pretty easy config with Entra from my experience and it’s going to become incredibly pressing in the near future that PSSO is enabled.

I’ve been looking around a bit (not really my area) and can see that we have PSSO enabled already in Entrea.

I’m a bit unsure about the best approach to get Jamf working with SSO in this case. There is a Single Sign-On option under Configuration Profiles in Jamf, and we have enabled SSO authentication in the settings linked to SAML.