Forum Discussion

PatrickF11's avatar
PatrickF11
MCT
May 24, 2024

Platform SSO for macOS not working

(Update after long troubleshooting: the two main issues until now were: Leading and/or trailing spaces in the configs > They lead to visible and unvisible errors! When using in europe you need to re...
Intune
macos
mobile device management (mdm)
Platform SSO
PSSO
PatrickF11's avatar
PatrickF11
MCT
Jun 27, 2024

After a few weeks of i'm back testing platform sso.

This is the current status:

  1. It is not working, even if the profile gets assigned successfully after removing some URLs. (Not working means, nothing pops up for the user to click through the final steps to activate PSSO.
  2. I've already worked through the mentioned article from intuneirl.
  3. The main issues are
    1. Company Portal is installed on the client but with installation failures in intune: 
      1. "One or more apps contain invalid bundleIDs. (0x87D13BA2)"
      2. The installation itself was done just as MS described or the intuneirl blog described. (Download package, new LOB App, upload, ...)
    2. When manually opening the company portal app on the mac device it says "This is device is not registered" (I'm not sure if this really a problem or if it's just a consequence of the previous problem.)

Result:

The whole deployment works just fine instead of plattform SSO is not popping up like mentioned e.g. in this screenshot:

And therefore nothing is registered inside the user account. When looking here the red area isn't there: (Screenshot from IntuneStuff Blog)

 

 

Any further ideas are highly appreaciated. I'm a little bit desperate already 😞

Mandi Ohlinger: Some information from your side?

 

Thanks everyone in advance

Patrick 🙂

Platformer's avatar
Platformer
Copper Contributor
Jul 01, 2024

Hello PatrickF11 ,

I have exactly the same error messages, but unfortunately they don't say what is wrong.

For your information, delete all bundle IDs, keep only the bundle ID with the version number of the company portal. The app will then be installed without errors.

Also, no pop-up after login and no installation of the profile on the target system.
However, I get an interesting error message when I try to manually activate Platform SSO for the company portal.
You can try to generate the same message if you go to "System settings" -> "Passwords" -> "Password options" -> "Use passwords and passkeys from" -> here, activate company portal.

In English it says:
"The use of master keys as an authentication method is not supported in your PlatformSSo configuration."

 

I am strongly convinced that this is the 10001 error or is this error message related to the fact that the SSO profile is not installed on the target system?

For me, this means, all settings in the documentation are incorrect. What needs to be done here?

 

 

Resources