-->

Identity V For Mac
Identity V Macbook Air
Identity V Macbook Pro

Important

Apple ID is the main account that is required to use any of Apple services including App Store, Apple Music, iTunes Store, and iCloud. Apple ID can store your payment and shipping information for purchasing apps, digital music, movies, and more from App stores and physical products from Apple site.

Testing conducted by Apple in October 2020 using preproduction MacBook Air systems with Apple M1 chip and 8-core GPU, configured with 8GB of RAM and 512GB SSD. The Apple TV app movie playback test measures battery life by playing back HD 1080p content with display brightness set to 8 clicks from bottom. Battery life varies by use and configuration. The Macbook Pro 16-inch is the king of the MacBooks with the best power and largest storage options, biggest screen and the Touch Bar and Touch ID features. It is also the most expensive, however.

This feature is in public preview. This preview is provided without a service-level agreement and isn't recommended for production workloads. Some features might be unsupported or have constrained capabilities. For more information, see Supplemental terms of use for Microsoft Azure previews.

The Microsoft Enterprise SSO plug-in for Apple devices provides single sign-on (SSO) for Azure Active Directory (Azure AD) accounts on macOS, iOS, and iPadOS across all applications that support Apple's enterprise single sign-on feature. The plug-in provides SSO for even old applications that your business might depend on but that don't yet support the latest identity libraries or protocols. Microsoft worked closely with Apple to develop this plug-in to increase your application's usability while providing the best protection available.

The Enterprise SSO plug-in is currently a built-in feature of the following apps:

Mac Identification (Identify Different Macs) Also see: iPod, iPhone & iPad Identification When EveryMac.com was founded in 1996, it wasn't necessary to help one identify which Mac they had because each Mac had a unique name on the front. ‎Identity V: 1 vs 4 Asymmetrical Horror Mobile Game Fear Always Springs from the Unknown. Game Introduction: Join the Thrilling Party! Welcome to Identity V, the first asymmetrical horror mobile game developed by NetEase. With a gothic art style, mysterious storylines and exciting 1vs4 gameplay.

Microsoft Authenticator: iOS, iPadOS
Microsoft Intune Company Portal: macOS

Features

The Microsoft Enterprise SSO plug-in for Apple devices offers the following benefits:

It provides SSO for Azure AD accounts across all applications that support the Apple Enterprise SSO feature.
It can be enabled by any mobile device management (MDM) solution.
It extends SSO to applications that don't yet use Microsoft identity platform libraries.
It extends SSO to applications that use OAuth 2, OpenID Connect, and SAML.

Requirements

To use the Microsoft Enterprise SSO plug-in for Apple devices:

The device must support and have an installed app that has the Microsoft Enterprise SSO plug-in for Apple devices:
- iOS 13.0 and later: Microsoft Authenticator app
- iPadOS 13.0 and later: Microsoft Authenticator app
- macOS 10.15 and later: Intune Company Portal app
The device must be enrolled in MDM, for example, through Microsoft Intune.
Configuration must be pushed to the device to enable the Enterprise SSO plug-in. Apple requires this security constraint.

iOS requirements:

iOS 13.0 or higher must be installed on the device.
A Microsoft application that provides the Microsoft Enterprise SSO plug-in for Apple devices must be installed on the device. For Public Preview, these applications are the Microsoft Authenticator app.

macOS requirements:

macOS 10.15 or higher must be installed on the device.
A Microsoft application that provides the Microsoft Enterprise SSO plug-in for Apple devices must be installed on the device. For Public Preview, these applications include the Intune Company Portal app.

Enable the SSO plug-in

Use the following information to enable the SSO plug-in by using MDM.

Microsoft Intune configuration

If you use Microsoft Intune as your MDM service, you can use built-in configuration profile settings to enable the Microsoft Enterprise SSO plug-in:

Identity V For Mac

Configure the SSO app extension settings of a configuration profile.
If the profile isn't already assigned, assign the profile to a user or device group.

The profile settings that enable the SSO plug-in are automatically applied to the group's devices the next time each device checks in with Intune.

Manual configuration for other MDM services

If you don't use Intune for MDM, you can configure an Extensible Single Sign On profile payload for Apple devices. Use the following parameters to configure the Microsoft Enterprise SSO plug-in and its configuration options.

iOS settings:

Extension ID: com.microsoft.azureauthenticator.ssoextension
Team ID: This field isn't needed for iOS.

macOS settings:

Extension ID: com.microsoft.CompanyPortalMac.ssoextension
Team ID: UBF8T346G9

Common settings:

Type: Redirect
- https://login.microsoftonline.com
- https://login.microsoft.com
- https://sts.windows.net
- https://login.partner.microsoftonline.cn
- https://login.chinacloudapi.cn
- https://login.microsoftonline.de
- https://login.microsoftonline.us
- https://login.usgovcloudapi.net
- https://login-us.microsoftonline.com

More configuration options

You can add more configuration options to extend SSO functionality to other apps.

Enable SSO for apps that don't use a Microsoft identity platform library

The SSO plug-in allows any application to participate in SSO even if it wasn't developed by using a Microsoft SDK like Microsoft Authentication Library (MSAL).

The SSO plug-in is installed automatically by devices that have:

Downloaded the Authenticator app on iOS or iPadOS, or downloaded the Intune Company Portal app on macOS.
Registered their device with your organization.

Your organization likely uses the Authenticator app for scenarios like multifactor authentication (MFA), passwordless authentication, and conditional access. By using an MDM provider, you can turn on the SSO plug-in for your applications. Microsoft has made it easy to configure the plug-in inside the Microsoft Endpoint Manager in Intune. An allowlist is used to configure these applications to use the SSO plug-in.

Important

The Microsoft Enterprise SSO plug-in supports only apps that use native Apple network technologies or webviews. It doesn't support applications that ship their own network layer implementation.

Use the following parameters to configure the Microsoft Enterprise SSO plug-in for apps that don't use a Microsoft identity platform library.

To provide a list of specific apps, use these parameters:

Identity V Macbook Air

Key: AppAllowList
Type: String
Value: Comma-delimited list of application bundle IDs for the applications that are allowed to participate in SSO.
Example: com.contoso.workapp, com.contoso.travelapp

To provide a list of prefixes, use these parameters:

Key: AppPrefixAllowList
Type: String
Value: Comma-delimited list of application bundle ID prefixes for the applications that are allowed to participate in SSO. This parameter allows all apps that start with a particular prefix to participate in SSO.
Example: com.contoso., com.fabrikam.

Consented apps that the MDM admin allows to participate in SSO can silently get a token for the end user. So add only trusted applications to the allowlist.

Note

You don't need to add applications that use MSAL or ASWebAuthenticationSession to the list of apps that can participate in SSO. Those applications are enabled by default.

Find app bundle identifiers on iOS devices

Ap

Identity V For Macbook