lucarena.com

Enforcing macOS Platform SSO During Automated Device Enrollment (ADE) Historically, deploying Apple's Platform Single Sign-On (PSSO) framework via Microsoft Intune resulted in a disjointed post-onboarding experience. Users had to land on the desktop, wait for MDM background sync, launch Company Portal, and manually complete the identity-to-device registration loop. With Microsoft's native integration of Platform SSO registration directly into Setup Assistant during Automated Device Enrollment (ADE) , the identity registration and device-join flow occur natively at boot. Here is the technical architecture, prerequisite stack, and configuration policy logic required to enforce this mechanism. The Mechanics of Setup Assistant Registration When a device is unboxed and initiates Apple ADE, the enrollment flow behaves as follows: Bootstrap Profile Delivery: The Mac reaches out to Apple's activation servers, is handed to Intune, and pulls down the initial MDM bootstrap payload, i...

In Microsoft Intune, you can delete multiple devices by creating and applying a device cleanup policy or by removing devices manually using the Intune admin console. Here are two methods to delete multiple devices in Intune: Method 1: Using Device Cleanup Policy (Recommended) Create a Device Cleanup Policy : Sign in to the Microsoft 365 Device Management portal ( https://devicemanagement.microsoft.com/ ). Go to "Devices" > "Device cleanup policies." Click on "Create policy." Configure the policy settings, such as the number of days a device should be inactive before deletion and whether to notify users before deletion. You can also choose to exclude specific device groups. Save the policy. Assign the Policy : After creating the policy, assign it to the desired group of devices or users. This will determine which devices will be subject to the cleanup policy. Monitor and Verify : Over time, Intune will automatically evaluate the devices based on the poli...