Most Mac onboarding projects that stall on Platform SSO stall for the same reasons: the three policies point at different groups, the enrollment policy was created before Await final configuration became the default, or Company Portal is one version too old. This checklist turns the full Intune macOS Platform SSO setup guide into twenty items you can mark Ready, Needs work, or Decision needed before the first Mac ships.
Every item is grounded in Microsoft Learn as of October 2026, with the setting values, the admin center paths and the reason each one matters, so your identity, endpoint and security owners can work through it in one sitting.
What the Checklist Covers
Work through each section before you wipe the first pilot Mac:
- Apple Business Manager, token and prerequisites — MDM push certificate and enrollment program token renewals, macOS and Company Portal version inventory, Intune and Entra ID P1 licensing, Users may join devices, MFA registration, TLS inspection exemptions
- Enrollment policy and Setup Assistant — user affinity, Setup Assistant with modern authentication, Await final configuration, Locked enrollment, the LAPS local administrator, the token default policy
- Platform SSO settings catalog policy — the authentication method decision (Secure Enclave, Password, Smart Card), every required setting value, Enable Registration During Setup, account modes, assignment to Assigned (static) user groups
- Company Portal, compliance and Conditional Access — Company Portal as a required line-of-business app, compliance policy settings, the macOS compliance policy, Conditional Access in report-only mode, browser brokers
- Verification and troubleshooting prep —
app-sso platform -s, the Network Account Server status, the Entra device record, Intune status, log collection commands, the recovery path for misconfigured policies - Pilot, rollout and migration — the wave plan and success criteria, migrating Macs enrolled before Platform SSO, retiring the old SSO app extension profile
The PDF also includes a ten-step build order and the commands to keep handy during a pilot.
Get the Checklist
Enter your information below to download the PDF.