Skip to main content

​
Platform compatibility

​
Set up the control

1

Add the Platform Single Sign-On application in Okta

  1. Go to Admin Console > Applications > Applications > Browse App Catalog
  2. Search for Platform Single Sign-On for macOS
  3. Click Add integration
    If the message This feature isn’t enabled appears, contact your Okta Account Manager to enable Okta Device Access (paid feature).
  4. Open the app from your application list
  5. In the General tab, rename the app label if needed
  6. In the Sign On tab, make note of the Client ID (required for MDM configuration)
  7. In the Assignments tab, assign the app to the relevant employees or groups
2

Create a SCEP challenge in Okta

  1. Go to Admin Console > Security > Device integrations
  2. Ensure the Device Access tab is visible (next to Endpoint Management)
    If the tab is missing, Okta Device Access is not yet enabled
  3. Add a Static SCEP certificate authority
  4. Make note of the following:
    • SCEP certificate URL
    • SCEP certificate challenge
3

Add Okta Verify to the software library

  1. From the Okta Admin Console, go to Settings > Downloads
  2. Download Okta Verify for macOS
  3. Add the app to the software library:
    • Upload the application file
    • Do not enable automatic deployment or self-service
    • Primo adjusts the settings automatically to handle deployment
4

Save key information for MDM configuration

Make sure to save the following details for the next step:
  • Okta domain (e.g. yourorganization.okta.com)
  • Client ID (from the Platform Single Sign-On application)
  • SCEP certificate URL
  • SCEP certificate challenge
5

Finalize the deployment

Go to MDM > Controls > Add new control.
  1. Select Mac login with Okta
  2. Enter the required information (domain, Client ID, SCEP URL, and Challenge)
6

Select targeting

Choose which devices to apply the control to: all macOS devices, specific device groups, or a custom target. Then save the changes.Mac login with Okta then activates on all targeted devices.
The deployment may take several minutes to complete, as Okta Verify must be installed on all targeted devices.