This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 0%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEM%3C/text%3E%3C/svg%3E)
Good day,
we are trying to test the new Global Secure Access (preview) client on macOS.
Our Macs are enrolled in Jamf on-premise and we would like to avoid to enroll the machines in Intune as well.
The question is if with the Entra connector or any other ways would be possilble or the GSA works with the Intune enrollment only.
Thanks
Emiliano
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@Emiliano Manfrin, Thanks for posting in Q&A. According to the following link, the Global Secure Access (GSA) client for macOS is currently in public preview. While it primarily outlines deployment through Microsoft Intune, it is possible to adapt the process for other Mobile Device Management (MDM) solutions like Jamf.
To know more details, you can contact Microsoft Entra ID support. Thanks!
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi,
thanks.
So basically if the Mac isn't enrolled in Intune but Entra registered only won't work?
Best
Hi,
thanks for the answer, so in short terms if the machine isn't enrolled in Intune and not only Entra registered won't work I guess.This is what we get in the company portal,
Thanks
Emiliano
I don't think Intune is the forced MDM. If you use other MDM, it is OK according to the above link. For the error, it can be that the Microsoft Entra tenant isn't onboarded to Global Secure Access. Please make sure it is onboarded.
Hi,
in GSA we just allow all users in the org to user it. Forwarding rules are very simple. Not sure what "onboard" means in this case but they should just be able to login.
Thanks
Got your point but the guide link isn't working so far. Looking for alternatives.
It worked!! adding a "configuration profile" using these settings;
-
com.microsoft.CompanyPortalMac.ssoextensionUBF8T346G9https://login.microsoftonline.comhttps://login.microsoft.comhttps://sts.windows.nethttps://login.partner.microsoftonline.cnhttps://login.chinacloudapi.cnhttps://login.microsoftonline.ushttps://login-us.microsoftonline.com
@Emiliano Manfrin, Thanks for marking our reply as answer. I am glad to hear that it works. Congratulations! Also, thanks for your detailed steps sharing here. Great!