usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-02-03 05:53:24 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

Platform SSO and os_unlock_active_user_session_disable #46

New Issue
Closed
opened 2026-01-19 18:29:02 +00:00 by michael · 2 comments
michael commented 2026-01-19 18:29:02 +00:00
Owner
Copy Link

Originally created by @robertgendler on GitHub.

Platform SSO sets the string value in system.login.screensaver to psso-screensaver.

When pSSO is configured and the compliance script fixes os_unlock_active_user_session_disable, it breaks platformSSO at screen saver unlock.

Originally created by @robertgendler on GitHub. Platform SSO sets the string value in system.login.screensaver to psso-screensaver. When pSSO is configured and the compliance script fixes os_unlock_active_user_session_disable, it breaks platformSSO at screen saver unlock.
michael commented 2026-01-19 18:29:02 +00:00
Author
Owner
Copy Link

@s2959219 commented on GitHub:

Platform SSO sets the string value in system.login.screensaver to psso-screensaver.

When pSSO is configured and the compliance script fixes os_unlock_active_user_session_disable, it breaks platformSSO at screen saver unlock.

Is there a way to force this to stay on psso-screensaver? it keeps changing randomy for us and it breaks it all. (Jamf MDM, Entra iDP, MacOS 26 pSSO.

@s2959219 commented on GitHub: > Platform SSO sets the string value in system.login.screensaver to psso-screensaver. > > When pSSO is configured and the compliance script fixes os_unlock_active_user_session_disable, it breaks platformSSO at screen saver unlock. Is there a way to force this to stay on psso-screensaver? it keeps changing randomy for us and it breaks it all. (Jamf MDM, Entra iDP, MacOS 26 pSSO.
michael commented 2026-01-19 18:29:02 +00:00
Author
Owner
Copy Link

@robertgendler commented on GitHub:

Fix in dev_sequoia_psso

@robertgendler commented on GitHub: Fix in `dev_sequoia_psso`
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michael
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#46
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?