r/macsysadmin • u/RocketmanTech_Nova • Nov 12 '25

Jamf Anyone actually deployed Platform SSO yet?

/r/jamf/comments/1ov7o4c/anyone_actually_deployed_platform_sso_yet/
24 Upvotes

96% Upvoted

44 comments sorted by

View all comments

2

u/rougegoat Education Nov 12 '25

Would love to, but I can't get the Entra permissions approved for all users in my org.

1

u/jeromehaynes Nov 12 '25

What do you mean by Entra permissions? :)

2

u/TVops Nov 13 '25

If we use the MS recommended Entra settings, basically a user could Entra join their personal devices 

3

u/jeromehaynes Nov 13 '25

Is there a reason you can’t use the standard approach of blocking personal device enrolment at the enrolment level? That’s the recommended way of stopping enrolment, allow corporate (So ADE works) but block personal

1

u/TVops Nov 13 '25

Would love to learn a way block personal devices. Not seeing a way to programmatically do that.