Configure the SSO app extension settings of a configuration profile.If you use Microsoft Intune as your MDM service, you can use built-in configuration profile settings to enable the Microsoft Enterprise SSO plug-in: Use the following information to enable the SSO plug-in by using MDM.

This app is the Intune Company Portal app. A Microsoft application that provides the Microsoft Enterprise SSO plug-in for Apple devices must be installed on the device.macOS 10.15 or higher must be installed on the device.This app is the Microsoft Authenticator app. iOS 13.0 or higher must be installed on the device.Configuration must be pushed to the device to enable the Enterprise SSO plug-in.The device must be enrolled in MDM, for example, through Microsoft Intune.macOS 10.15 and later: Intune Company Portal app.iPadOS 13.0 and later: Microsoft Authenticator app.iOS 13.0 and later: Microsoft Authenticator app.The device must support and have an installed app that has the Microsoft Enterprise SSO plug-in for Apple devices:.To use the Microsoft Enterprise SSO plug-in for Apple devices: It is natively integrated with the MSAL, which provides a smooth native experience to the end user when the Microsoft Enterprise SSO plug-in is enabled.It extends SSO to applications that use OAuth 2, OpenID Connect, and SAML.It extends SSO to applications that don't yet use the Microsoft Authentication Library (MSAL).It can be enabled by any mobile device management (MDM) solution and is supported in both device and user enrollment.It provides SSO for Azure AD accounts across all applications that support the Apple Enterprise SSO feature.The Microsoft Enterprise SSO plug-in for Apple devices offers the following benefits: The Enterprise SSO plug-in is currently a built-in feature of the following apps: Microsoft worked closely with Apple to develop this plug-in to increase your application's usability while providing the best protection available. The plug-in provides SSO for even old applications that your business might depend on but that don't yet support the latest identity libraries or protocols. The Microsoft Enterprise SSO plug-in for Apple devices provides single sign-on (SSO) for Azure Active Directory (Azure AD) accounts on macOS, iOS, and iPadOS across all applications that support Apple's enterprise single sign-on feature.

Apple ios mdm