Mac
Platform Single Sign-on on a Mac
Platform Single Sign-on (Platform SSO) connects your Mac to your work account. Once it's set up, your Mac holds a credential inside its Secure Enclave — the same idea as Windows Hello — and you sign in to work apps with Touch ID or your Mac password. It's phishing-resistant and signs you in to Microsoft apps automatically.
Before you start
This is for Macs managed by your organisation. You'll need the Company Portal app (your IT
team installs it or tells you where to get it), a way to approve sign-ins such as Microsoft Authenticator, and
ideally macOS 14 Sonoma or later.
1. Enrol your Mac
- Sign in to Company Portal Open Company Portal, select Sign in and sign in with your work account.
- Start set-up When asked to set up access for your organisation, select Begin, then Continue.
- Install the management profile Select Download profile. If it doesn't open automatically, go to System Settings › Privacy & Security › Profiles, select the management profile and choose Install. Enter your Mac password when asked.
- Finish in Company Portal Company Portal confirms when installation is complete. Select Done.
2. Register for Platform SSO
- Select Register A Registration Required notification appears at the top right of the screen. Hover over it and select Register.
- Unlock and sign in Unlock with Touch ID or your Mac password, choose your work account, sign in and select Next.
- Verify it's you Approve the sign-in — for example, enter the number shown on screen into Microsoft Authenticator.
- You're done When the loading screen closes, your Mac is registered and work apps sign you in automatically.
Use it as a passkey in your browser (optional)
If your organisation set up Platform SSO with the Secure Enclave, your Mac can also act as a passkey when a website asks you to sign in again. Go to System Settings › General › AutoFill & Passwords and, under AutoFill from, turn on Company Portal.
If the Register notification doesn't appear
- Wait about 10 minutes — it comes back by itself after a missed attempt.
- Sign out of your Mac and sign back in.
- On macOS 14 or later, go to System Settings › Users & Groups › Network Account Server, select Edit, then Repair.
- Still stuck? Contact your IT support team.