Forum Discussion

mek-a2's avatar
mek-a2
Copper Contributor
Apr 14, 2026

Platform SSO "Page not found" on macOS Tahoe 26.4 — Company Portal 5.2602

Environment:

  • macOS Tahoe 26.4
  • Company Portal 5.2602.0 (latest as of April 2026)
  • Microsoft Intune — Automated Device Enrollment (ADE)
  • Platform SSO with Secure Enclave (UserSecureEnclaveKey)
  • SSO Extension: com.microsoft.CompanyPortalMac.ssoextension / Team ID: UBF8T346G9
  • URLs configured: https://login.microsoftonline.com, https://login.microsoft.com, https://sts.windows.net
  • Device: MacBook Pro 14" (Apple Silicon), supervised, ADE-enrolled

Issue:

During Platform SSO registration, after the user authenticates successfully in the SSO registration prompt, Company Portal crashes with a "Page not found" error. The registration never completes — no WPJ certificate is created, no SSO registration key is stored in the Secure Enclave.

Console logs show:

CompanyPortalMac: URL(filePath:) API misuse — usingass old file path API which does not support security scoped bookmarks

The error occurs specifically at the token exchange step after authentication, suggesting the Company Portal binary is calling a deprecated macOS file URL API that Tahoe 26.4 now enforces more strictly.

What we tried:

  • Full wipe and re-enrollment via ADE
  • Removing and reinstalling Company Portal via Intune
  • Different user accounts
  • Verified SSO extension profile is correctly applied (confirmed via profiles show -type configuration)
  • Verified network connectivity to Microsoft identity endpoints
  • Tested on a clean macOS Tahoe 26.4 install — same result

Expected behavior:

Platform SSO registration completes, WPJ certificate is created, and SSO token is cached for seamless authentication.

Actual behavior:

"Page not found" after authentication in the SSO registration flow. Console shows the URL(filePath:) API misuse warning. Registration fails silently — no error surfaced to the user beyond the page not found screen.

Question:

Is this a known bug in Company Portal 5.2602 with macOS Tahoe 26.4? Is there a newer build or hotfix addressing the URL(filePath:) deprecation? Any workaround available?

Tags: Platform SSO, macOS, Company Portal, ADE, Intune

intune
mobile device management (mdm)

1 Reply

  • Jamony's avatar
    Jamony
    MCT
    Jul 16, 2026

    I can’t confirm that the URL(filePath:) warning is the root cause, and I don’t see this exact failure listed as a published Platform SSO known issue. The clean-device reproduction makes a client/OS compatibility issue plausible, but I’d first rule out configuration.

     

    For an ADE device with user affinity, assign the Platform SSO policy to a user group, not a device group or filter. If you enable PSSO during Setup Assistant, the Settings Catalog policy, Company Portal app, and ADE enrollment profile should all target the same static user group. Confirm that only one SSO extension payload applies, {{DEVICEREGISTRATION}} is present, and the macOS 14+ authentication method is UserSecureEnclaveKey.

     

    Update Company Portal through Microsoft AutoUpdate so you aren’t redeploying the same 5.2602 package, then capture Company Portal logs after reproduction. If the latest build still fails on clean 26.4 devices, open an Intune support case with those logs and the exported profile. Don’t assume a downgrade or hotfix is supported until Microsoft confirms it.