Today we’re announcing that Platform SSO for macOS is available in public preview with Microsoft Entra ID. Platform SSO is an enhancement to the https://learn.microsoft.com/en-us/entra/identity-platf...
Updated May 06, 2024
Version 2.0
Blog Post
According to the official documentation, deploying two SSO configurations simultaneously is not recommended. However, how should you proceed in an environment that requires both Kerberos SSO (via Kerberos extension profile) and SAML/MSAL SSO (via Platform SSO)
“Multiple SSO extension payloads are applying to the device and are in conflict. There should only be one extension profile on the device, and that profile should be the settings catalog profile.
If you previously created an SSO app extension profile using the Device Features template, then unassign that profile. The settings catalog profile is the only profile that should be assigned to the device.”
Source: https://learn.microsoft.com/en-us/mem/intune/configuration/platform-sso-macos#common-errors
What is the officially recommended approach?