#Mac os safari starts with logon update#

browser_sso_interaction_enabled set to 1 - Allows the plug-in to reduce the sign in steps for supported login URLs in Safari and apps that do not use MSAL.Using the Azure AD documentation, I was able to set some extra configuration that reduces password prompts further. To configure the Microsoft Enterprise SSO plug-in with Intune, you need to create a macOS > Device Features profile and configure the Single sign-on app extension ( DevicesВ > Configuration profilesВ > Create profileВ > macOSВ for platform > Device featuresВ for profile > Single sign-on app extensionВ > SSO app extension type > Microsoft Azure AD).

For details on installing the Company Portal app, see Add the macOS Company Portal app.

#Mac os safari starts with logon update#

Company Portal for macOS version 00 or newer which will automatically update using Microsoft Autoupdate.This article explains some of the configuration I used in my lab and will hopefully jump start your implementation. The plug-in interacts with the Microsoft Authentication Library (MSAL) which is used by Microsoft and third-party applications to optimise Azure AD logons. The Microsoft Enterprise SSO plug-in for Microsoft Azure AD is designed to reduce the number of authentication prompts a user gets on their macOS device. On the 12th October, Intune provided support for the macOS Microsoft Enterprise SSO plug-in (public preview).