By the MacAdmins LatAm Community Team. Published May 19, 2026. A technical deep dive on Platform Single Sign-On (PSSO) for macOS Tahoe.
Key Points
- Platform SSO introduced in macOS 13 Ventura; major updates in macOS 26 Tahoe
- Three authentication methods: Password Sync, Secure Enclave Key, Smart Card
- Simplified Setup moves PSSO registration into Setup Assistant for true zero-touch identity
- New: Authenticated Guest Mode and Tap to Login (NFC via Apple Wallet) for shared devices
- IdP support: Microsoft Entra ID (GA May 2026), Okta (production), PingFederate (in progress), Google Workspace (not supported)
- Jamf Connect still needed for offline MFA, privilege elevation, and Google Workspace deployments
- Requires Apple silicon or Intel Mac with Touch ID, plus MDM with Extensible SSO profile support