Enterprise - The Codex

MSP AI DEV BLOG

Platform SSO Simplified Setup with Okta: Fixing the associatedDomains=(null) Registration Failure

Platform SSO Simplified Setup with Okta: Fixing the associatedDomains=(null) Registration Failure

Platform SSO Simplified Setup in macOS 26 moves IdP registration into Setup Assistant. Users authenticate with Okta before reaching the desktop. The Mac creates the first local account from IdP credentials. No banner notifications, no user action after the initial sign-in. If you have read my previous article on Platform

Understanding JAMF Pro Blueprints: When and How to Use DDM-Powered Device Management

Understanding JAMF Pro Blueprints: When and How to Use DDM-Powered Device Management

JAMF Pro Blueprints deploys device configurations using Apple's Declarative Device Management (DDM) protocol instead of traditional MDM commands. The device receives a declaration of its desired state and maintains that state autonomously, reporting changes back to JAMF Pro without polling. This article covers what Blueprints are, how they

Declarative Device Management vs Traditional MDM: What Changes and What You Do About It

Declarative Device Management vs Traditional MDM: What Changes and What You Do About It

Apple announced at WWDC 2025: traditional MDM software update commands are deprecated. They will be removed in 2026. If you manage Macs or iOS devices through JAMF Pro, Intune, Mosyle, or any MDM solution, this affects your workflows. This is not a minor API change. It represents a fundamental shift

Managing Apple Intelligence in the Enterprise: What You Can Control and What You Cannot

Apple Intelligence

Managing Apple Intelligence in the Enterprise: What You Can Control and What You Cannot

Apple Intelligence shipped with iOS 18.1, iPadOS 18.1, and macOS 15.1 Sequoia in late 2024. The feature set has expanded with each OS release since. Organizations managing Apple devices face a decision: allow it, restrict it partially, or attempt to block it entirely. This article covers the

macOS Platform SSO: The Promise, the Pain Points, and What Actually Works

macOS Platform SSO: The Promise, the Pain Points, and What Actually Works

Platform SSO is Apple's answer to a long-standing enterprise problem: making Macs behave like Windows devices in identity-managed environments. Users authenticate once with corporate credentials. That authentication flows through to apps, websites, and system prompts. The Mac becomes a first-class citizen in your identity infrastructure. The promise is

How to Use JAMF Connect with Authentik: Building an ROPG Proxy for Password Synchronization

How to Use JAMF Connect with Authentik: Building an ROPG Proxy for Password Synchronization

synchronization between macOS local accounts and cloud identity providers. Authentik does not natively support ROPG for regular user authentication, despite listing "password" in its discovery document's supported grant types. This article provides a working solution using Authentik's Flow Executor API. The problem: JAMF Connect