Platform SSO for macOS on Hexnode MDM with Google WorkspaceSolved

Hey @james-hoang-nguyen , Great query man!

Hexnode has successfully implemented its Google Workspace Integration which is currently being used for the Single Sign-On (SSO) feature known as Hexnode Access. Additionally, we are in the process of integrating Google Workspace password synchronization through LDAP certificate authentication within Hexnode Access. We will keep you updated regarding the public release of this enhanced feature.

As for the implementation of Secure Enclave, we plan to explore it in the future.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

Cheers
Ben Clarke
Hexnode UEM

Hi Ben,

Thanks for your response. The SSO implementation that you mentioned above only works for Gsuite account that users login to the portal for enrollment. The above implementation is a different one below, please check out the below URL.

https://support.apple.com/en-vn/guide/deployment/dep7bbb05313/web

With this implementation, the platform SSO for macOS will not use such secured LDAP, instead they will use the SSO token directly to authenticate to the IdP to login to the MacOS. Is there any specific roadmap / ETA for this implementation?

Regards,

James.

Hello @james-hoang-nguyen , Thank you for your reply!  

The integration with Google Workspace isn’t limited to just enrollment authentication; we’re also using it within Hexnode Access. By configuring your Google Workspace domain in the Hexnode UEM portal, you can easily select this pre-configured domain when setting up the Hexnode Access policy. This makes the login process on your Macs smoother and more convenient for users. Also, in the upcoming updates for Hexnode Access, we’ll be introducing LDAP certificate authentication, which should enhance the experience further.

As for the platform SSO token being used directly for IdP authentication on Macs, it is indeed part of our roadmap, but we have not yet reached a stage where we can commit to a specific timeline.

I hope this clears things up. Let me know if you have any more questions!

Best regards,
Ben Clarke
Hexnode UEM