AMA: Powerful Apple device management with Intune

Yes, through a combination of things, you can have true passwordless and able to manage the admin account credentials. There are a couple of nuances that should be discussed separately here. The first account on the device requires a local password to be set - this remains the case even with PSSO configured. Creating the local account and managing the password is going to be supported through the local account command and in the long-term, the admin password will be managed via LAPS. However, with the advent of PSSO, the need of a local password will be minimized for the first account and eliminated for subsequent accounts when using PSSO with "Enable create user at login" setting in the SSO extension. The PSSO experience is truly passwordless with the following exceptions: (1) you need to enter your Entra password the first time the password is synced to the local account, (2) when you restart your device or when the PSSO user is logged out, a password is required, (3) when your Entra password changes, macOS will prompt you to enter your new password.

This was meant to say passwordless! Not wireless 🙂