The first step in deploying Platform SSO for Microsoft Entra ID is to decide how you want users to authenticate to their computers. Three methods of authentication are currently supported:
- Secure Enclave (recommended)
This method leverages the SSO plug-in to use hardware-bound cryptographic keys. For more information on Secure Enclave, see the Protecting keys with the Secure Enclave article from the Apple Developer website.
- Smart card
- This method allows users to use the smart card certificate and its associated PIN to authenticate to macOS, apps, and websites.
- Password
This method allows users to sign in to their computer with their Microsoft Entra ID user account instead of their local account password. It also enables SSO to be used for authentication across apps and websites.
macOS 13 supports Password and Secure Enclave key authentication methods only.
For more detailed information on the available authentication methods, see the Step 1 - Decide the authentication method section of Microsoft's documentation.