The first step in deploying Platform SSO for Microsoft Entra ID is to decide how you want users to authenticate to their computers. The following authentication methods are currently supported:
- Secure Enclave (recommended)
-
This method leverages the SSO plug-in to use hardware-bound cryptographic keys. For more information on Secure Enclave, see the Protecting keys with the Secure Enclave article from the Apple Developer website.
- Smart card
- This method allows users to use the smart card certificate and its associated PIN to authenticate to macOS, apps, and websites.
- Password
-
This method allows users to sign in to their computer with their Microsoft Entra ID user account instead of their local account password. It also enables SSO to be used for authentication across apps and websites.
Note:
macOS 13 supports the password and Secure Enclave key authentication methods only.
For more information on the available authentication methods, see the Step 1 - Decide the authentication method section of Microsoft's documentation.