Table of Contents Introduction Prerequisites Set up Device Access SCEP certificates Configure Okta as a CA for Device Access Create a dynamic SCEP profile in Jamf Pro Verify that the Okta CA was installed on your devices Update your MDM profiles Update your device management profile Update your single sign-on extension profile Demo Password Sync on…
Table of Contents Introduction Prerequisites Set up Device Access SCEP certificates Configure Okta as a CA for Device Access Download the x509 certificate from Okta Workspace ONE SCEP configuration Create a Certificate Authority Add a Certificate Template Create a device profile to deploy the Okta CA Create a user profile to deploy the Okta CA-issued client…
Table of Contents Introduction Prerequisites Set up Device Access SCEP certificates Configure Okta as a CA for Device Access Kandji SCEP configuration Verify that certificate was installed on device Update your Kandji Library profiles Platform SSO configuration profile Okta Verify configuration profile Introduction Support for Platform SSO 2.0 is available for macOS computers using Sonoma (14.0) and later.Platform…
Table of Contents Introduction Prerequisites Create / Adjust MDM Profiles Workspace ONE UEM Profile Jamf PRO Profile Kandji Profile Microsoft Intune Profile Introduction In Desktop MFA for macOS, admins can now choose between Okta Verify push notification and Okta Verify Time-based One-Time Password as the user verification method used to link an Okta account to the…
Introduction Support for Platform SSO 2.0 is available for macOS computers using Sonoma (14.0) and later.Platform SSO 2.0 allows Desktop Password Sync to be used directly from themacOS login window.In this blog, I will briefly describe the configuration steps required to use Okta Device Access with Platform SSO 2.0 and Microsoft Intune as your MDM solution. Prerequisites Before you start ensure that you meet…
Okta Desktop MFA for macOS adds an extra layer of security to the macOS sign-in process by asking users for additional authentication before allowing computer access. In this blog we show you how to configure Desktop MFA in the Okta Admin Console, and then deploy it through VMware Workspace ONE. Technical Prerequisites Create and configure the Desktop MFA app integration In the Admin Console,…
October 2024: The Okta application name from “Desktop Password Sync” to“Platform Single Sign-On for macOS” April 2025: Additional app identifier required for the associated domain entry on macOS 15 Sequoia (mobileconfig template was updated) Introduction With macOS Ventura, Apple introduced Platform SSO, which enables developers to create a single sign-on (SSO) extension that interacts directly with the macOS login…
August 2024: This is an Early Access Feature Table of Contents Introduction Prerequisites Enable Device Recovery Configure Device Recovery Omnissa Workspace ONE UEM Jamf Pro Kandji Microsoft Intune Request a Device Recovery PIN Demo Request a Device Recovery PIN Create Device Recovery PIN Demo Create Device Recovery PIN Demo Desktop MFA Admin Recovery Conclusion Introduction…
Table of Contents Introduction Prerequisites Configure Allowed Factors MDM policy Omnissa Workspace ONE UEM Jamf Pro Kandji Microsoft Intune Demo Introduction Admins can now control which verification methods users are permitted to authenticate with by configuring a new registry value called AllowedFactors.This provides greater flexibility in managing authentication options within the system. Prerequisites Configure Allowed Factors…
April 2025: Additional app identifier required for the associated domain entry on macOS 15 Sequoia Table of Contents Introduction to Just-in-Time Local Account Creation on macOS with Okta Requirements for Implementing Just-in-Time Local Account Creation with Okta on macOS Enable JIT provisioning in the Admin Console Add custom attributes to Platform SSO app Set up Device Access SCEP certificates…