Skip to main content

Hello,

Prior to adopting Jamf Pro and Jamf Connect we were pushing a profile with a different MDM to enable the Kerberos SSO extension built-in to the OS.  I had assumed after we removed the management profile from the previous MDM, which of course removed the Kerberos profile, that the key on the menu bar would have disappeared, the login window would have no longer popped up, and all functionality would have ceased.  This does not seem to happen.

To be clear, Jamf Connect is working perfectly as a replacement and requesting and renewing Kerberos tickets correctly, but the built in tool also sticks around.

I see plenty of documentation from Apple and forums on the internet about how to create and setup the profile to make the Kerberos SSO Extension work, but nothing on how to disable it.  

Has anyone else experienced this?  Anyone found a way to disable?

The plist generated by that profile lives in /Library/Managed Preferences/com.apple.extensiblesso.plist.  You can either bin that file or possibility scope a kerberos SSO profile in Jamf Pro to a test client.  Ensure the profile installs then pull the scope and see what happens. A reboot may be required due to preference caching.

Terms & ConditionsCookie settingsAccessibility statement