An additional workflow configuration is available for Simplified Setup for Platform Single Sign-on (Platform SSO). Simplified Setup for Platform SSO previously supported only a single workflow configuration where the Single Sign-on Extensions (SSOe) profile installs after the computer is enrolled with Jamf Pro. This enhancement expands the functionality of Simplified Setup for Platform SSO by including an additional workflow configuration where the SSOe profile installs at the beginning of the enrollment process, forcing users to authenticate with your identity provider (IdP) before enrollment completes.
The following workflow configuration options are available:
- Attended (SSOe profile installs before enrollment) —The Platform SSO application and profile are installed prior to enrollment, and successful user registration is required to enroll with Jamf Pro.
Note:
Enrollment customizations cannot be used with the attended workflow method.
- Unattended (SSOe profile installs during enrollment) —Enrollment with Jamf Pro completes, then the computer is held in Setup Assistant to register with Platform SSO before setup completes.
Both workflows allow user registration with a supported Platform SSO IdP during setup of Automated Device Enrollment. The “Attended” workflow allows for one less user sign-in, where an SSO authentication to Jamf Pro may have previously been required with an enrollment customization. The “Unattended” flow was originally supported with Jamf Pro 11.20.0; this workflow can also allow for an unattended computer registration with Platform SSO if an identity provider supports this specific capability.
To access these configuration options in Jamf Pro, navigate to and either create a PreStage enrollment or edit an existing one. For more information, see Configuring Simplified Setup for Platform Single Sign-On in the Jamf Pro Documentation.