Article Intended For

Penn State IT employees whose Penn State-managed Mac computer has been enabled to self-enroll in Platform SSO.

Introduction

Platform SSO provides a phishing-resistant, passwordless way to sign in to your Penn State-managed Mac computer as well as to Penn State sites and services. Once enrolled, your Mac can use a device-bound passkey to authenticate to your Penn State Account without requiring you to enter your password each time.

Things to know:

• Platform SSO should be enabled for all managed Mac computers for Penn State IT staff. You can follow the instructions in this article to self-enroll. If you are a Penn State IT employee and don't see the Company Portal, please submit a ticket to the IT Service Desk and be sure to include your device serial number or computer name: https://www.it.psu.edu/support/
  
  
• If you work for another unit (not Penn State IT), you will need to contact your local IT (the staff who manage your device) to request Platform SSO. If you are unsure of who that is, contact the IT Service Desk and be sure to include your device serial number or computer name and the department you work for: https://www.it.psu.edu/support/
  
  
• Platform SSO is for Mac computers managed by Penn State only. If you would like to use Touch ID on your personal Mac computer, please see the following KB article: MFA: Enroll a Passkey on a Personal macOS Computer and Use Touch ID
  
  
• Platform SSO is device-bound. It must be enabled separately on each eligible Penn State-managed computer. If you register on your managed computer, it does not follow you to other computer that not specifically set up for you.
  
  
• You will self-request Platform SSO from the Self-Service catalogue on your managed Mac computer .
  
  
• If Touch ID is available and enabled on your Mac, you can use your fingerprint to authenticate with Platform SSO.
  
  
• Touch ID does not replace your Mac password. You may still be required to enter your Mac password in certain situations.
  
  

Article Body

How Do I Enroll in Platform SSO?

NOTE: As mentioned previously in this article, Platform SSO should be enabled for all managed Mac computers for Penn State IT staff. You can follow the instructions in this article to self-enroll. If you are a Penn State IT employee and don't see the Company Portal, please submit a ticket to the IT Service Desk and be sure to include your device serial number or computer name. If you work for another unit (not Penn State IT), you will need to contact your local IT (the staff who manage your device) and request it. If you are unsure of who that is, please contact the IT Service Desk: https://www.it.psu.edu/support/

1. to trigger Platform SSO enrollment, go to the Applications folder and find Self Service
   
     
   
   
2. open Self Service
   
   
3. if prompted, log in using your Penn State Account credentials
   
   
4. select Catalog
   
   
   
   
5. select All
   
   
6. select Install
   
   
   
   
7. a spinning progress icon will appear and the process may take a few minutes to complete. Shortly after completion, you should receive a notification to register.
   
   NOTE: If you don't see this notification after some time, you may have your notifications muted by default. Check under the clock section to see if you have any new notifications.
   
   
   
   
   
8. when the Registration Required notification appears, select Register
   
   
   
   
9.  on the Single Sign-On for Mac screen, select Continue
   
   
   
   
10. On the PSU Account Credentials screen, if you have Touch ID enabled already on your Mac, you can use your fingerprint to register your account on your device. Or, select Use Password and type in your Penn State Account password.
    
    
    
    
11. On the Register your device with Microsoft Entra screen, select your Penn State Account and complete the sign-in process with your Penn State Account credentials
    
    
    
    
    NOTE: After authenticating, if you receive an error message that states "Registration failed and will automatically retry in a few minutes" this likely means that your machine is not set up properly and you will need to contact IT support for assistance.
    
    
12. A new window will appear asking you to Allow Company Portal to autofill to use your passkey. You can select Open System Settings to take you to that menu option to enable Company Portal.
    
    Or you can navigate directly to General > Autofill & Passwords > Autofill from > Enable Company Portal, and ensure that Company Portal is enabled.
    
    
    
    
13.  After enabling Company Portal, you should receive a confirmation message stating "Successfully configured the passkey for your work or school account." Select Close
    
    
    
    You can now sign in using Platform SSO with your Penn State Account
    
    

How do I sign in with Platform SSO?

1. Visit a Penn State website you want to log into (example: https://accounts.psu.edu)
   
   
2. Enter your Penn State Account username then select Next (or press the ENTER key on your keyboard)
   
   
   
   
3. A screen should appear momentarily, informing you that your device will open a security window and to follow the instructions presented to you.
   
   
   
   
4. A Sign In screen will appear, listing your Penn State Account passkey saved in Company Portal. Select Continue
   
   
   
   
5. On the Company Portal screen, you can place your finger on your Mac's fingerprint reader to perform Touch ID, or you can select Use Password if your Touch ID is not available.
   
   

After you have unlocked Company Portal with Touch ID, it should use your passkey to log you in.