Scalefusion December 24th, 2025 Release Notes

Version Information:

• Scalefusion Dashboard: v62.1.0

• Scalefusion macOS MDM Agent: v5.5.3

Release Notes:

1. macOS

   1. IdP-Based Account Creation for Automated Device Enrollment

      IT administrators can now enable IdP-based account creation during Automated Device Enrollment (ADE). With Keycard-based configuration, users can sign in with their Identity Provider (IdP) credentials as part of the initial device setup, instead of creating a local account.

      This streamlined experience ensures the account name and password are aligned with the user’s IdP credentials from first use, improving consistency and reducing setup friction.

   2. Bug Fixes

      1. Fixed an issue where the Global Admin account was not correctly marked in Device Details > UAM.

      2. Fixed an issue with creating Global Admin accounts using custom properties where support for user-level custom properties ($user.*) for Global Admin account creation has been deprecated. Device-level custom properties ($device.*) remain supported.

      3. Fixed an issue where scripts were executed even when “Run on Publish” was disabled.

2. OneIdP

   1. OneIdP SSO Support for ADFS

      OneIdP Single Sign-On (SSO) now supports Active Directory Federation Services (ADFS). With this enhancement, ADFS can be configured to use OneIdP as its authentication and authorization provider, extending OneIdP’s capabilities to ADFS-based authentication flows.

      This allows organizations to use OneIdP consistently across both Microsoft 365 cloud scenarios and fully on-premises Exchange or service-based environments. Once configured, OneIdP applies the same conditional access policies to ADFS-integrated services as it does to other supported service providers.

   2. Email Prefill for Google Workspace (GWS) SSO Flows

      Google Workspace now supports passing the user’s email address to external Identity Providers (IdPs) as a login hint during SSO authentication.

      When this option is enabled in the Google SSO configuration, OneIdP automatically receives the user’s email address when they are redirected from Google Workspace. This allows OneIdP to prefill the email field in both standard OneIdP sign-in flows and Keycard sign-in flows, reducing duplicate user input and improving the sign-in experience.

Team:

• Team Scalefusion