Event banner
Event details
- Hopping to hear some news about integrated user login on mac using Azure AD credentials
- Neil Johnson
Microsoft
We've got Platform SSO in private preview today, which links the local Mac account with Entra ID. We're hoping that will come to public preview in Q1 CY24. Keep an eye on our Mac Admins community for more updates.
- Are there plans to simplify the onboarding that doesn't require a local account be created and the local account be the Entra ID username?
- Neil JohnsonDuring Q1CY24 we'll ship local account management, this sets the local user account name to come from the Entra ID used during setup assistant. Keep an eye out here https://learn.microsoft.com/en-us/mem/intune/fundamentals/whats-new
- Ernesto_Lara-MatthewsThis is the next step to further simplify the logon flow on macOS. No concrete plans at the moment, but we are aware of the desire to have this. Thanks for the feedback!
- With our current Mac MDM solution we are able to make groups for devices using a wealth of criteria. In Intune, device groups are extremely limited, for example I can not make a group based on software applications that are installed on the machine in Intune. Are you working on closing gaps like this?
- Neil JohnsonThanks for the feedback, we've been hearing this a lot lately. Today we have Dynamic AD groups in Entra and Intune Filters. These currently don't reach quite as far as some of our competitors and we're thinking of ways we can meet those gaps in the future.
- Ernesto_Lara-MatthewsThanks for the feedback! We are always looking for ways to improve our grouping and targeting across all platforms.
- Will Intune be adding a shared user login experience using Entra ID credentials?
- Neil JohnsonWe've shipped the payloads for this already but it requires some changes in the SSO extension. Keep an eye out for the public preview during Q1 for more information.
- Are you planning to support SCEP certificate to user logon keychain? ATM we can't use user-based certificates because of this. https://learn.microsoft.com/en-us/mem/intune/protect/certificates-profile-scep#:~:text=provisioned%20by%20SCEP%3A-,macOS,-%2D%20Certificates%20you%20provision
- Neil JohnsonYes! We're actively working on this, keep an eye out on our Intune What's new Page for more info early next year https://learn.microsoft.com/en-us/mem/intune/fundamentals/whats-new
- Ernesto_Lara-MatthewsWe are evaluating all the feedback in this area. We're ideating strategies to securely allow this, but not concrete plans that can be announced yet. Thanks for the feedback!
Great session/video thank you for that!
Might it be possible to add the Defender script (pre and post script) that was shown in the demo to https://github.com/microsoft/shell-intune-samples/tree/master/macOS or if it is already there,
I would love a link to it, as I could not find it quickly.
Perhaps it is also a idea to add this to the documentation here > https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-install-with-intune?view=o365-worldwide.
- Thanks all! Looking forward to the updated app deploy options and expanding our Platform SSO!!
- Char_Cheesman
Community Manager
Thanks for joining us! We hope you enjoyed this session. If you missed the live broadcast, don’t worry – you can watch it on demand. And we’ll continue to answer questions here in the chat through the end of the week. There's more great content in store at the Microsoft Technical Takeoff! What do you like about the event so far? Share your feedback and help shape the direction of future events on the Tech Community!
- How will the Platform SSO integration with Entra work for FileVault password?
- That is a great question. I know it's escrowed to Intune so I'll have to see if its still valid. I have had no reason to use it as of yet but still would like to know myself now.
- Char_Cheesman
Welcome to Microsoft Intune reinvents Mac management and the last day of Microsoft Technical Takeoff for Windows + Intune! Have a question? Post here in the Comments so we can help. Let’s make this an active Q&A!
