Fix Entra conditional access integration docs (#36472)

This commit is contained in:
Lucas Manuel Rodriguez 2025-12-01 11:26:22 -03:00 committed by GitHub
parent 55cc7cf465
commit 924f0a6f52
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -8,10 +8,6 @@ Migrating from your current MDM solution to Fleet? Head to the [migration instru
Entra conditional access is supported even if you're not using MDM features in Fleet.
Migrating from your current MDM solution to Fleet? Head to the [migration instructions](#migration).
Entra conditional access is supported even if you're not using MDM features in Fleet.
[Microsoft](https://learn.microsoft.com/en-us/intune/intune-service/protect/device-compliance-partners) requires that this feature is only supported if you're using Fleet's managed cloud.
- [Step 1: Create a "Fleet conditional access" group in Entra](#step-1-create-a-fleet-conditional-access-group-in-entra)
@ -73,17 +69,18 @@ We will need to create a dynamic label to determine which macOS devices have "Co
We will use this label to conditionally deploy a Platform SSO configuration profile (next step).
Head to **Hosts > Filter by platform or label > Add label + > Dynamic**.
Select the avatar on the right side of the top navigation and select **Labels > Add label**.
- Name: `Company Portal installed`
- Description: `Company Portal is installed on the host.`
- Type: `Dynamic`
- Query:
```sql
SELECT 1 FROM apps WHERE bundle_identifier = 'com.microsoft.CompanyPortalMac';
```
- Platform: `macOS`
### Depoloy Platform SSO configuration profile
### Deploy Platform SSO configuration profile
For Entra's "Conditional Access" feature we need to deploy a Platform SSO extension for Company Portal.
The extension must be deployed via configuration profiles. For more information see https://learn.microsoft.com/en-us/intune/intune-service/configuration/platform-sso-macos#step-3---deploy-the-company-portal-app-for-macos.