Platform SSO: The Next Frontier for Mac Authentication with Okta & Microsoft Entra скачать в хорошем качестве

Platform SSO: The Next Frontier for Mac Authentication with Okta & Microsoft Entra

Authentication fatigue is real. IT departments spend countless hours managing password resets while employees juggle multiple credentials across corporate applications. Security teams battle an endless stream of phishing attempts targeting those same passwords. Platform SSO for #macOS represents a fundamental shift away from this broken model. This comprehensive JNUC 2025 session reveals how Platform Single Sign-On extends authentication capabilities directly into the macOS operating system, transforming the managed device itself into the authenticator. Adam Derrick (Jamf Solutions Engineer - Identity) and Christopher Scalise (Mac Systems Administrator at PublicisGroupe) demonstrate real-world implementation across 37,000 Macs worldwide, covering Simplified Setup during automated device enrollment, Secure Enclave passwordless authentication, and the strategic migration path from Jamf Connect to Platform SSO. Learn about the authentication methods available today (password sync, Secure Enclave, smart cards), what's coming soon (tap to login with iPhone/Apple Watch), current identity provider support (Okta launching mid-October 2024, Microsoft #EntraID in testing), and why Jamf is actively encouraging organizations to adopt #PlatformSSO over #JamfConnect for new deployments. What You'll Learn: ► What Platform SSO is and how it transforms macOS authentication at the operating system level ► Four authentication methods: password sync, Secure Enclave (passwordless), smart cards/YubiKeys, tap to login (coming soon) ► Simplified Setup: Deploy Platform SSO during automated device enrollment (new in macOS Sequoia/15) ► Real-world deployment strategy from PublicisGroupe: 37,000 Macs worldwide with phased Platform SSO rollout ► Identity provider support status: Okta (mid-October 2024), Microsoft Entra ID (in testing), Google (feedback requested) ► Secure Enclave vs. password sync: technical differences and security implications ► How to migrate from Jamf Connect to Platform SSO (automated process in development) ► Authenticated Guest Mode for shared Mac environments (education, healthcare, manufacturing) ► The "switcheroo" policy: deploying Platform SSO without disrupting 37,000 existing devices ► Password rotation with Platform SSO: 90-day cycle synchronization process ► Extension attributes for monitoring Platform SSO deployment status ► Configuration profiles: custom app support (Adobe, in-house apps, Microsoft suite) ► Multi-user production environments: creating persistent local accounts with Platform SSO #JNUC2025 #PlatformSSO #MacAuthentication #IdentityManagement #Passwordless 0:00 Introduction: Authentication Fatigue and the Platform SSO Solution 2:26 What is Platform SSO? Fundamental Shift in macOS Authentication 4:29 Platform SSO Capabilities and Authentication Methods 6:10 Authenticated Guest Mode for Shared Mac Environments 6:58 Tap to Login with iPhone and Apple Watch (Coming Soon) 7:37 Secure Enclave: Passwordless Authentication Explained 9:27 Simplified Setup: Platform SSO During Automated Device Enrollment 13:20 Jamf Connect vs Platform SSO: Migration Strategy and Timeline 17:13 Real-World Implementation: PublicisGroupe's 37,000 Mac Deployment 28:11 Behind the Scenes: How Simplified Setup Works (403 Enrollment Method) 32:16 Production Environments: Multi-User Platform SSO Configuration 35:28 Live Demo: Simplified Setup with Okta During Automated Device Enrollment