macOS SSO

Hi Nick, Thanks for reaching out to Sophos Community.

SFOS v18 and above support Kerberos for SSO and you can use them with macOS if you're successfully able to join MAC systems to your Active Directory.

STAS on the other hand (another SSO type supported by XG) will not work properly as it uses WMI for logout detections and I am not sure about WMI is supported on Mac or not.

You can always use CAA (Client Authentication Agent) and install them on MAC and user can use the same AD credentials to log in through it, Instead of SSO if that's an option.

Thanks! Yes I thought that it should be working with kerberos. I see only some logins so am wondering where I might start troubleshooting our AD environment. macOS devices bind and authenticate fine but having mixed results on the XG. Is there any technical documentation about this feature?

We have a troubleshooting article for Kerberos and NTLM. Check that out here.

Thanks!