This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 11%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERN%3C/text%3E%3C/svg%3E)
I am managing some MacOS devices using Microsoft Intune. Devices are synchronized from Apple Business Manager to Intune, and enrollment appears to be functioning correctly. However, there is an issue with trusting the MS-Organization-Access certificate. This certificate is generated when a device is Entra joined and is unique for each device.
When users log into Microsoft365 via Safari, they see an untrusted certificate prompt.
The current workaround involves manually clicking to trust the certificate. However, I am looking for a method to have the operating system trust this certificate using Intune.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 61%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EXM%3C/text%3E%3C/svg%3E)
@Ruslan Nalivaika Thanks for posting in our Q&A.
Honestly, I haven't met this issue. And I couldn't repeat this situation because without MacOS on hand. Given this situation, it is suggested to create an online support ticket to get more help. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support
Thanks for your understanding and hope everything goes well with you.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.