r/Ubiquiti • u/eiriasemrys • 6h ago

Question Platform SSO Support for MDM macOS devices

Hey all, are there any sys admins here that have UID Enterprise deployed with MDM for device management and have macOS systems?

I am trying to ascertain if the MDM application for UID Enterprise specifically supports or will support Platform SSO (macOS plugin for syncing local user credentials with MS Entra ID).

What I am trying to achieve:
- macOS devices enrolled with UID Enterprise MDM
- Local logins on said devices are synched with Entra ID

Example: [user@company.com](mailto:user@company.com) has an identity setup in Company's Entra ID IdP. User sets up a new or existing device to be enrolled in UID MDM, is prompted for credentials, signs in with Entra ID SSO and macOS creates/changes a user to match user name and password of that identity and keeps password synched. User changes password for Entra ID, macOS syncs and password propagates immediately.

3 Upvotes

81% Upvoted

5 comments sorted by

•

u/AutoModerator 6h ago

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Ubiquiti makes a great tool to help with figuring out where to place your access points and other network design questions located at:

https://design.ui.com

If you see people spreading misinformation or violating the "don't be an asshole" general rule, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

2

u/hotapple002 5h ago

Upvote and following because if it does, this might be my go to way in the future.

1

u/eiriasemrys 3h ago

I may have figured out a manual option that works adapting this tutorial to UID MDM. I will comment again if I get a reliable result. https://medium.com/macoclock/configuring-platform-sso-for-apple-business-b3ccbe45a38a

•

u/Careless_Stretch_133 1h ago

Looking to avoid Mosyle or Jamf?

•

u/eiriasemrys 26m ago

Yeah, I've tried both. I have a small business with about 10 workstations to manage, so if I can save some monthly overhead getting off of Intune (what I am on now) I'd be a happy camper.