In automatic mac enrollment authentication will not go with Microsoft credentials

Question

Hello,

I set up everything in ABM and Intune. I want to enroll Mac devices automatically.

In intune:

1-MDM push certificated was set and is active.

2-Enrollment program tokens was set and is active.

3- Mac profile "Enroll with User Affinity" was set to device.

In ABM section:

setting up is like this:

The mac device does not ask for Microsoft credentials for login. I do not see following page.

instead I see bellow page that I don't want.

2 (2).jpeg

it would be great if someone can help me.

Answer 1

I even though don't know what kind of credentials does it asks

Answer 2

@N-M Thanks for posting in our Q&A.

For this issue, we appreciate your help to collect some information:

1.Did you use ADE enrollment method to enroll this device?

2.How did you configure the setting "Authentication method" in this Mac profile? Based on my research, different authentication methods will lead different results.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-macos#ade-end-user-tasks

If there is anything update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Thank you for helping me.

For your questions:

1- Yes.

2-Enroll with user affinity + Setup Assistant with modern authentication

I double check configurations

I set these in Apple business manager:

1- the mac device is in the Apple business manager. 2-MDM server assigned for target mac device. 3-The target user is in apple business manager. I created the user in ABM.

3-MDM server was added in ABM

As you see in bellow picture domain and Microsoft Entra ID was set. ( Should I do something specific here?)

When I click on manage in above picture I see bellow window. Do I need to enable Sign in with Microsoft Entra ID?

I created Apple ID ( username in ABM) and it was working fine before.

I set up these steps in Intune:

1-Enrollment programs tokens was set and active in Intune. 2-Mac profile in Intune was set to Enroll with user affinity and authentication method is " setup assistant with modern authentication". 3-Apple MDM push certificate is active. 4- I can see device in Enrollment program token->devices to ready to enroll.

When I try to enroll the mac it does not accept the username and password that I created in ABM. As I said everything was working correctly before soddenly something that I cannot find went wrong.

Answer 4

Thank you for helping me.

For your questions:

1- Yes.

2-Enroll with user affinity + Setup Assistant with modern authentication

I double check configurations

I set these in Apple business manager:

1- the mac device is in the Apple business manager. 2-MDM server assigned for target mac device. 3-The target user is in apple business manager. I created the user in ABM.

3-MDM server was added in ABM

As you see in bellow picture domain and Microsoft Entra ID was set. ( Should I do something specific here?)

When I click on manage in above picture I see bellow window. Do I need to enable Sign in with Microsoft Entra ID?

I created Apple ID ( username in ABM) and it was working fine before.

I set up these steps in Intune:

1-Enrollment programs tokens was set and active in Intune. 2-Mac profile in Intune was set to Enroll with user affinity and authentication method is " setup assistant with modern authentication". 3-Apple MDM push certificate is active. 4- I can see device in Enrollment program token->devices to ready to enroll.

When I try to enroll the mac it does not accept the username and password that I created in ABM. As I said everything was working correctly before soddenly something that I cannot find went wrong.