About Platform Single Sign-On
- Beginning August 2026, JAMF connect will no longer be installed.
- Company Portal will now be installed (PSSO) moving forward.
- New device set up will include new screens prompting for user authentication, such as:
- Prompts for MFA.
- Microsoft SSO authentication screens. This helps create the user account and sync password.
Troubleshooting
Password not being accepted?
If a user upgraded their SJU-issued macOS device to macOS 27 "Golden Gate", they may experience an issue where their password does not seem to be accepted when logging in for the first time post-upgrade. If this scenario takes place, the user should reboot their computer and confirm they are connected to the internet (wifi or hardwired).
Similarly, the Platform SSO (PSSO) application will appear in the top right corner of your Mac asking the user to register (even though this may have previously been completed, or maybe they have yet to register). When the user attempts to enter their password in order to register, it will repeatedly reject the password over and over again.
Example:
These steps can be done to correct the issue for when the registration prompt is repeatedly shown and rejecting the correct password:
-
Open the Company Portal App location within the Applications folder on the affected Mac.
-
Sign in to the Company Portal using your SJU email address and password.
-
Click 'Postpone'
-
Click user account in the upper right hand corner of the window
-
Click remove account from device.
- Proceed with the repair process outlined above in the Troubleshooting section.
Repairing a broken registration
Open System Setting
Navigate to "Users & Groups" And Click the "i" next to account name
On the Window that opens, click "repair"
This will begin the steps to re-register and sync your device with your SJU credentials
Setup Process & Workflow
- Turn on the Mac and proceed through the initial Setup Assistant screens until the Remote Management screen appears.
- Enroll the Mac by selecting Continue on the Remote Management screen so Automated Device Enrollment can apply the correct MDM configuration.
- When prompted to create a computer account, enter the user’s Entra ID username (email address) exactly as provided.
- When Setup Assistant redirects to the Platform SSO sign‑in window, have the user authenticate with their Entra ID password.
- After successful authentication, allow Platform SSO to create the local macOS account automatically using the user’s Entra identity.
- When prompted to set a local password, have the user enter the local macOS password that Platform SSO requires (this may differ from the Entra password if password separation is enabled).
- Complete the remaining Setup Assistant screens until the Mac reaches the desktop.
Additional Notes
- Single-User devices ONLY.
- A network connection must be available when registering.
- MFA is required.
- Devices are registered within our Azure/Entra portal. At the time of writing this article, we are not leveraging any of the management abilities within Azure/Entra. The registration, however, is a requirement for PSSO to work.
*Internal SJU Tech Troubleshooting
*These steps are meant to only be used by and SJU technician in the instances where the steps above for troubleshooting did not work*
- Log into Workspace one
- Steps for removing the PSSO Profile
- Search for affected device
- Go into Profiles tab
- Remove the
"Microsoft-PlatformSSO" profile
- On the end-user's Mac
- Delete the "Company Portal.app" application (move to trash)
- Steps for reinstalling the "Company portal" app
- Option 1:
- Open "Managed Software Center" on the end-users Mac
- Search for "Company Portal" and select "Install"
- Confirm this installs the .app back into the Applications folder
- Option 2:
- If for some reason "Company Portal" does not show up as an available install within MSC, follow these steps:
- From browser on the end-user's Mac and have the user click on this link:
- Company portal download link.
- This will automatically download the latest .pkg from Microsoft to the end-user's Downloads folder.
- Have the user open the .pkg to reinstall the Company Portal app manually.
- Option 3:
- Back from within Workspace one:
- Go this link (this will take you to the Company Portal config page)
- Select the "Devices" tab
- Search for and select affected device
- Click "Install"
Once the Company Portal application has been reinstalled, reinstall the Company Portal profile.
Steps for reinstalling the Company Portal (PSSO) profile:
- Open the WS1 console again
- Search for affected device
- Go into Profiles tab
- Select "Install" for the
"Microsoft-PlatformSSO" profile
After a few minutes, once the app and profile have been installed, the prompt for registering their account with PSSO should reappear, which should be done at this time.