Mac Admins Podcast Episode 418: Looking at PSSO after WWDC, with Michael Epping & Joel Rennich
17 snips
Jul 1, 2025 Michael Epping, a Microsoft expert in identity solutions, and Joel Rennich, a specialist in Apple device management, delve into the latest advancements in cloud identity management following Apple's WWDC. They discuss the transformative impact of modern authentication and Platform Single Sign-On (PSSO). The conversation covers challenges in integrating security measures like multi-factor authentication and explores the shift towards passwordless security solutions in enterprise environments. Get insights on balancing user experience with robust security!
AI Snips
Chapters
Transcript
Episode notes
PSSO Enhances Identity Integration
- Platform Single Sign-On (PSSO) in macOS 26 greatly improves identity integration by tightly coupling device enrollment and authentication.
- Making PSSO mandatory instead of opt-in enhances security and reduces user friction during setup.
Attestation Builds Device Trust
- Using attestation with Platform SSO helps establish device trust at enrollment without requiring user MFA.
- This root of trust can ease security concerns when first exposing an unknown device to management systems.
Avoid Web Browsers on Lock Screen
- Avoid web browsers on lock screens due to security risks and compromised offline access.
- Use phishing-resistant methods like secure enclave keys to counter most remote attacks effectively.