AskTechGurus Get help now →

Intune & Device Management

Platform SSO on Mac won't register with Microsoft

The prompt to register a Mac for single sign-on with the work account fails, errors out or never appears, so users keep getting asked to sign in.

What you’re seeing

  • The "Registration Required" notification on the Mac either never appears or disappears without completing.
  • Registration fails with a generic error or a message that the device could not be registered.
  • Users keep getting Microsoft sign-in prompts in Outlook, Teams and the browser despite Platform SSO being configured.
  • The Mac is enrolled in Intune but shows as unregistered in Microsoft Entra ID.

Common causes

Every environment is different, but these are the causes our engineers find most often:

  • The Platform SSO configuration profile has the wrong extension identifier, team ID or authentication method for the Microsoft Enterprise SSO plug-in.
  • The Company Portal app is missing or outdated, so the SSO extension it supplies is not available.
  • The macOS version on the Mac is older than the release Platform SSO requires.
  • A conditional access policy or device registration limit in Entra ID rejects the new registration.
  • Network filtering or a proxy blocks the Microsoft endpoints the registration process needs to reach.

Why it matters

When Platform SSO fails, staff lose the single sign-on experience you planned and face constant password prompts, which slows them down and trains them to enter credentials whenever asked, a habit phishers exploit. Device-based conditional access may also see the Mac as unregistered and block access to company apps. Rolling out Macs becomes slower and more support-heavy than it should be.

How AskTechGurus fixes it

Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.

Tell us what’s happening

Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.

A certified engineer diagnoses it

A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.

Fixed and verified with you

The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.

Pay only when it’s resolved

Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.

Frequently asked questions

Is this a problem with the user's account or the Mac?

It can be either, or the policy that ties them together. The configuration profile, the Company Portal version and the Entra ID settings all have to line up for registration to succeed.

What does it cost to have it looked at?

Remote support from our certified US engineers starts from $99, and you pay only when the problem is resolved.

Still stuck? Let a pro take it from here.

AskTechGurus connects you with vetted, US-based systems engineers who fix this every day. No call centers, no scripts, no surprise bills.

Start now →