--- title: "Microsoft Single Sign On (SSO) for macOS." slug: "microsoft-single-sign-on-sso-for-macos" tags: ["platform sso", "sso plug-in", "microsoft entra", "SSO", "o365", "single sign on"] updated: 2026-02-12T10:27:09Z published: 2026-02-12T10:27:09Z canonical: "help.scalefusion.com/microsoft-single-sign-on-sso-for-macos" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt > Use this file to discover all available pages before exploring further. # Microsoft Single Sign On (SSO) for macOS. ## Introduction Microsoft Enterprise SSO plug-in for Apple devices provides Single Sign on (SSO) for Microsoft Entra accounts on macOS, iOS and iPadOS across all applications that supports Apple’s enterprise single sign on feature. Users can now log in to their Mac computers using **Identity Provider (IdP) credentials**, such as **Microsoft Entra ID** or **Azure** **AD** and subsequently, sign in to corporate apps and websites automatically. If you utilize **Microsoft Entra/Azure** and wish to enable your users to experience single sign-on across all applications, Microsoft offers a solution through the company portal app. This document provides guidance on how you can leverage this capability. > [!NOTE] > To know more about Microsoft Enterprise SSO please visit the Microsoft documentation: > > [https://learn.microsoft.com/en-us/entra/identity-platform/apple-sso-plugin](https://learn.microsoft.com/en-us/entra/identity-platform/apple-sso-plugin) > > [https://learn.microsoft.com/en-us/mem/intune/configuration/use-enterprise-sso-plug-in-macos-with-intune?tabs=prereq-other-mdm%2Ccreate-profile-other-mdm](https://learn.microsoft.com/en-us/mem/intune/configuration/use-enterprise-sso-plug-in-macos-with-intune?tabs=prereq-other-mdm%2Ccreate-profile-other-mdm) ## Prerequisites 1. **macOS 10.15 or higher** must be installed on the device. 2. A Microsoft application that provides the Microsoft Enterprise SSO plug-in for Apple devices must be installed on the device. This app is the **Intune Company Portal app**. ## Steps to make this feature work with Scalefusion - Step 1: Install the Intune Company Portal (ICP) app on the Mac device(s). - Step 2: Push the Custom Payload to Mac device(s). ### Step 1: Install Intune Company Portal app on the Mac device(s). 1. Download the Intune Company Portal (ICP) app PKG file from the following link: [https://officecdn.microsoft.com/pr/C1297A47-86C4-4C1F-97FA-950631F94777/MacAutoupdate/CompanyPortal-Installer.pkg](https://officecdn.microsoft.com/pr/C1297A47-86C4-4C1F-97FA-950631F94777/MacAutoupdate/CompanyPortal-Installer.pkg) 2. Log into your Scalefusion dashboard and navigate to **Application Managment** > **Enterprise Store** section. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-UVL1EEI5.png) 3. Click on **Upload New App** button > click on **Upload macOS App**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-AY3LAF5I.png) 4. Click on **Upload PKG file**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-04P7SUE2.png) 5. Upload the previously downloaded ICP PKG file. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-H3W0UEJP.png) 6. Once the file is uploaded, click on **Save**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-58QCOL49.png) 7. Publish the PKG file on the Device Profile for Mac device(s). ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-4CBAXVY0.png) ### Step 2: Push the Custom Payload to Mac device(s). 1. Copy the contents below directly and add them to **Apple Configurations** > **Custom Configurations** for Mac, or click [**here**](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/sso_extension_macOS.xml) to download the file and import it. 2. Follow our [**guide**](/docs/custom-configuration-ios-and-macos) on how to add the Custom Payload in the Apple Configurations & deploy it to devices. ```xml    PayloadContent                        ExtensionData                            useSiteAutoDiscovery                                        ExtensionIdentifier            com.microsoft.CompanyPortalMac.ssoextension            TeamIdentifier            UBF8T346G9            URLs                          https://login.microsoftonline.com              https://login.microsoft.com              https://sts.windows.net              https://login.partner.microsoftonline.cn              https://login.chinacloudapi.cn              https://login.microsoftonline.us              https://login-us.microsoftonline.com                        Type            Redirect            PayloadIdentifier            com.example.myessopayload            PayloadType            com.apple.extensiblesso            PayloadUUID            dbed949d-39a2-440d-a84b-e0c825cdcb2e            PayloadVersion            1            PayloadDisplayName            P1Extensible SSO                PayloadDisplayName    Extensible SSO    PayloadIdentifier    com.example.myprofile    PayloadType    Configuration    PayloadUUID    da3bbbec-a753-4aa7-aeae-a74b7a65c0b5    PayloadVersion    1 ``` > [!CAUTION] > Notes: > > 1. The Payload and its contents are sourced from various albeit authenticated Apple Developer communities and forums. > 2. Please validate them on a test machine before deploying them on all your managed devices. > 3. Scalefusion has tested these Payloads, however, Scalefusion will not be responsible for any loss of data or system malfunction that may arise due to the incorrect usage of these payloads. ## End user experience. 1. The Intune Company Portal app does not require active use; it merely needs to be installed on the device. 2. To initiate the extension, users sign in to any supported app or website, facilitating the bootstrap process, which configures the extension during the initial sign-in. 3. Upon successful sign-in, the extension seamlessly and automatically authenticates users across all other supported apps or websites. > [!NOTE] > You can test single sign-on by opening Safari in private mode and opening the [https://portal.office.com](https://portal.office.com) site. No username and password will be required. If you encounter any difficulties or have questions, please reach out to our Support team at: [support@scalefusion.com](mailto:support@scalefusion.com)