Hi Intune_Support_Team
Could you please clarify this: "✅ Static groups only: This feature does not work with device groups or dynamic groups." ?
How about "Dynamic User group"?
Did you test for this? I tried to create and apply PSSO during setup assistant and create user at the first sign in. It's work for Dynamic User group. But I should to get confirmation from Microsoft for this point.
Besides, as Microsoft recommendation, PlatformSSO should be applied to Dynamic Group (by filter EnrollmentProfile). Could you please share with us best practice for migration current PSSO configuration to new PSSO Configuration and apply to users without impaction.
As testing, we configured out the steps by steps but should be verified by Microsoft.
1- Create a filter assignment (Filter ABM Devices with enrollmentProfile = "example")
2- [InCurrentPSSO] - Change Assignement to Dynamic Users group, Filter Include "ABM Devices"
3- [EditCurrentPSSO] - Edit/update some new settings (.... as recommended)
4- Save.
Could you please review? we tested and it's worked.