macOS Platform SSO in ADE Now Generally Available

Introduction

Microsoft has announced general availability for Platform SSO (PSSO) during Automated Device Enrollment (ADE) on macOS. For IT teams managing Apple devices with Microsoft Entra ID and Intune, this is an important improvement because it removes extra enrollment steps and builds identity configuration directly into the initial setup experience.

What’s new

With this release, Platform SSO can now be completed automatically during macOS Automated Device Enrollment.

Key changes include:

• Automatic Entra ID registration during setup for enrolled macOS devices
• Platform SSO activation as part of enrollment instead of requiring a separate post-setup action
• Fewer user prompts during first-run device onboarding
• More consistent identity configuration across newly deployed Macs

This is enabled through the EnableRegistrationDuringSetup capability, which performs Platform SSO registration within the managed ADE workflow.

Why this matters

Previously, users could be asked to finish Platform SSO registration after setup, often through an additional prompt or a manual “Finish” step. That added friction to onboarding and created another point where setup could be delayed or missed.

By integrating PSSO directly into ADE, Microsoft is helping organizations:

• Reduce deployment complexity
• Improve first-day productivity for users
• Strengthen compliance and device trust earlier in the lifecycle
• Standardize identity-backed access from the first sign-in

This will be especially useful in large-scale deployments, including enterprise rollouts, education environments, and frontline scenarios where speed and consistency matter.

Impact on IT administrators

For admins, this update means identity is now treated as a core part of macOS provisioning rather than a follow-up task. If you already use ADE and Platform SSO, the workflow becomes simpler and easier to standardize.

Benefits for IT teams include:

• Less reliance on users to complete setup correctly
• Fewer enrollment support issues
• Better alignment between MDM provisioning and Entra identity controls
• Faster delivery of compliant, ready-to-use devices

Next steps

To use Platform SSO during Automated Device Enrollment, organizations should:

1. Configure Automated Device Enrollment for macOS in their MDM solution.
2. Ensure Platform SSO is already configured for the organization.
3. Enable EnableRegistrationDuringSetup in the deployment profile.

If you manage macOS devices in Microsoft Intune, now is a good time to review your ADE profiles and update your onboarding process to take advantage of this GA capability.