Jamf Pro & Connect with Entra ID & Platform SSO

[Gobstopper]

I am hoping for a bit of guidance.

I have used Jamf School in the past for iPad management but this didn't involve any integration with Entra or Platform SSO.

I now have a provision that is entirely Apple, I know what I am doing with the iPads but they also have iMacs and we would like to be able to log into the iMacs with our Microsoft 365 accounts with SSO so that all Microsoft services sign in automatically, for example, Office 365, OneDrive etc. I have been recommended Jamf Pro and Connect for this purpose and currently have both on trial.

I have an iMac that is enrolled into Apple School Manager and is managed by Jamf Pro. Jamf Connect is installed and successfully logs in using an Microsoft 365 account but does not SSO into portal.office.com, instead Company Portal appears asking for an email address and password. I have followed the following guidance

https://learn.jamf.com/en-US/bundle/technical-articles/page/Platform_SSO_for_Microsoft_Entra_ID.html...

Am I missing something or am I simply misunderstanding the level of functionality currently available when using Entra ID?

Thank you!

[AJPinto]

Welcome to how SSO works on MacOS. Jamf Connect is not generating a ticket that Microsoft cares about. 

To get a better understanding of this you will need to research SSOe's (or Single Sign-on Extensions), depending on how you have MS configured you may need to have Comp Portal installed on your Macs to broker the ticket to Microsoft for authentication. 

Platform SSO is something totally different to what Jamf Connect is doing. This is Apples first attempt at passing login window credentials to the keychain for being able generate tickets. PSSO would not need Jamf Connect, and I am actually not sure if the two can work together. It does need the Comp Portal to be installed, and a Configuration Profile deployed to enable it. Because of course PSSO is not included in the default MS licenses and is a bolt on.

[tahir]

Have you set up the application in Entra ID?
Please refer to the articles below; they will assist you

https://learn.microsoft.com/en-us/entra/identity/saas-apps/jamfprosamlconnector-tutorial
https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Single_Sign-On.html