Platform Single Sign-On (PSSO) allows you to sign in to your Mac using your UWin Account credentials (your Microsoft work or school account). Once you sign in to your Mac, you will also be automatically signed in to supported University applications and websites, reducing the number of times you need to enter your credentials.
Originally, PSSO was deployed to Mac users using the Password configuration, which synchronizes the Mac password with the UWin Account password. The newer configuration, called Secure Enclave PSSO, is being rolled out gradually and does not synchronize the Mac password with the UWin Account password. Instead, macOS creates a hardware-bound passkey, known as a platform credential. The private key remains securely protected within the Mac's Secure Enclave, while the corresponding public key is registered with Microsoft Entra ID.
Once IT Services has enabled PSSO for your account, sign in to your Mac as you normally would, then follow the steps below to complete the SSO setup on your Mac:
-
You will eventually see the Registration Required pop-up at the top right of the screen. Hover over the pop-up or click on it and select Register.
-
When a Single Sign-On for Mac window appears, select Continue.
-
You will be prompted to Register your macOS account with your identity provider. Enter your Mac account credentials and select Next.
-
When the Register your device with Microsoft Entra sign-in window appears, select the University account you want to use. If required, enter your UWin Account credentials.
-
Complete multi-factor authentication (MFA) when prompted.
-
You should see Preparing your device.... message. This can take a couple of minutes. Stay on this screen until your device is ready.
-
When registration is completed, you will see Single- Sign-on for Mac - Registration complete message. Click on Close to finalise this setup.
Once you've completed the steps above, it's a good idea to check your device registration status.
-
To check that registration has completed successfully, navigate to Settings and select Users & Groups.
-
Select Edit next to Network Account Server and check that Mac SSO Extension is listed as Registered.
-
To verify the method used for authentication, navigate to your username in the Users & Groups window and select the Information icon ("i" in a circle). Check the method listed, which should be Secure enclave key or Password, depending on which config profile was assigned ot your account by the admin.