Platform Single Sign-On (PSSO) with Omnissa Access

The SSO Extension plug-in built into macOS Intelligent Hub is available starting from version 25.11. This extension is required to enable Platform Single Sign-On when Omnissa Access is used as an Identity Provider (IDP) or as a broker for a third-party IDP. Platform Single Sign-On (SSO) in macOS 13 and later allows users to access company resources protected by a cloud identity provider (IDP). Detailed documentation on how to set up PSSO with Omnissa Access is available at Configuring Apple macOS Platform Single Sign-On with Omnissa Access.

The SSO extension agent in macOS Intelligent Hub acts as a broker between the operating system and Omnissa Access to enable Platform Single Sign-On (SSO).

• The operating system receives the Platform SSO configuration and identifies the SSO extension to use—in this case, macOS Intelligent Hub.
• The OS then initiates device and user registration with the Identity Provider (IDP), prompting the user to enter their macOS and IDP credentials.
• Once registration is complete, the IDP issues required token, which is stored securely in the device keychain.
• This token enables seamless sign-in to the device thereafter.