In apply, Platform SSO isn’t splendid. It’s designed for BYOD and one-to-one deployments the place every person has his or her personal Mac and doesn’t match in addition to listing service binding for Macs that help a number of customers. Though broadly employed, there could also be conditions the place it isn’t supported.
Whereas Apple gives restricted administrator instruments for utilizing Platform SSO, third-party distributors have created higher implementations, together with JAMF Join, Kandji Passport, and SimpleMDM. These instruments additionally simplify help for multifactor authentication and person entry to a Mac, usually changing the usual macOS login window. However in addition they require one other funding in value, time and complexity.
Identification and MDM
Cellular Gadget Administration (MDM) software program interacts with enterprise identities by way of Apple Enterprise Supervisor. As soon as the MDM setup is in place and related to Apple Enterprise Supervisor, it might entry customers, units and teams obtainable to Apple Enterprise Supervisor and use them to provision units and handle configuration profiles; deal with person account assignments; and ship MDM instructions. (The information required for these features is saved by the MDM service, not Apple Enterprise Supervisor or any federated id supplier.)
