Everything about running Jamf Pro alongside Microsoft Intune and Microsoft Entra ID: Device Compliance and Conditional Access for Macs, iPhones and iPads, Jamf Connect and Platform SSO, deploying Microsoft Defender and Microsoft 365 apps with Jamf, fixing registration and compliance errors, and moving devices from Jamf Pro to Intune.
How Jamf Pro and Microsoft Intune work together, then set up Device Compliance, migrate from the legacy integration and fix registration, Conditional Access and connector errors.
Platform SSO, Jamf Connect and Entra ID sign-in, Entra ID as Jamf Pro's identity provider and SSO, deploying Defender and Microsoft 365 apps with Jamf, and moving devices to Intune.
Step-by-step setup of every Jamf and Microsoft integration.
Deploy Microsoft 365 for Mac, Company Portal and Microsoft AutoUpdate with Jamf Pro: official packages, App Installers or policies, an MAU profile, activation and verification.
Build the Applicable and Compliance smart groups, run the Jamf Pro Device Compliance wizard, add the Intune compliance partner and require compliant Macs without blocking registration.
Move Macs off Jamf Pro's retired macOS Conditional Access integration: what changes, an order of steps that avoids lockouts, Jamf's migration script, verification and a realistic rollback plan.
Deploy Defender for Endpoint to Macs with Jamf Pro in the right order: onboarding plist, settings, permission profiles, a smart group gate and the package. Then read mdatp health and fix its errors.
Connect Jamf's mobile threat defense to Intune: UEM Connect consent, the MTD connector, Jamf Trust activation, device threat level in compliance and app protection, and fixes when it fails.
Plan a Jamf Pro to Intune move: map profiles and scripts, reassign ADE devices, choose OS 26 migration or a wipe, handle FileVault, Activation Lock and app licences, and fix enrollment errors.
Combine Jamf Pro device compliance for iPhone and iPad with Intune app protection: the partner connector, smart groups, IntuneMAMUPN keys, Conditional Access and how to verify each piece.
Configure the Microsoft Enterprise SSO plug-in and Platform SSO from Jamf Pro: payload values, Company Portal first, Device Compliance registration, verification and the errors to expect.
Set up SAML single sign-on from Microsoft Entra ID to Jamf Pro and Self Service, keep a working failover login, and fix the AADSTS50105, AADSTS50011 and AADSTS700016 sign-in errors.
Registration, compliance, Conditional Access, connector and sign-in errors — with fixes.
Fix Jamf Device Compliance registration on Macs: Account not onboarded, Device is already enrolled, keychain prompts, duplicate Entra devices and registrations that never turn compliant.
Jamf devices not reporting compliance to Entra ID? Check the Intune partner status, scoping, licences, the Entra apps Jamf's wizard creates, Jamf Pro smart groups and legacy leftovers.
A Mac is compliant in Jamf Pro, yet Conditional Access returns AADSTS53000. Read the sign-in log, find the broken link (registration, compliance sync, browser or device ID) and fix it.
Connect Jamf Pro to Microsoft Entra ID as a cloud identity provider and fix what breaks: admin consent, Graph permissions, attribute mappings, nested groups and LDAP migration.
Fix Jamf Connect sign-in with Microsoft Entra ID: the app registration, ROPG password checks, Conditional Access after the June 2026 change, and the AADSTS errors at the Mac login window.
How the pieces fit together, and how Jamf Pro and Intune compare.
A balanced look at Jamf Pro and Microsoft Intune for Apple devices in 2026: declarative management, scripting and inventory, Self Service vs Company Portal, compliance, identity and when to run both.
A map of the Jamf and Microsoft integrations in 2026: Device Compliance, the retired macOS integration, Platform SSO, Jamf Connect, Entra ID in Jamf Pro, threat defense and Defender.
53 Jamf, Company Portal, Entra ID and compliance errors from the Intune error library.
1000 com.apple.AuthenticationServices.AuthorizationErrorMac sign-in (SSO extension)Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs1001 UnexpectedMac sign-in (SSO extension)Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs1012 NSURLErrorDomain errorMac sign-in (SSO extension)Platform SSO and the Microsoft Enterprise SSO plug-in on Jamf Pro-managed Macs[activated waiting for user]Terminal (systemextensionsctl list)Deploy Microsoft Defender for Endpoint on Macs with Jamf Pro (and fix mdatp health errors)AADSTS50011 InvalidReplyToJamf Connect login windowJamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errorsAADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the applicationMicrosoft Entra sign-in pageJamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errorsAADSTS50020: User account '...' from identity provider '...' does not exist in tenant '...' and cannot access the applicationMicrosoft Entra sign-in pageJamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errorsAADSTS50076 UserStrongAuthClientAuthNRequiredMicrosoft Entra sign-in log (Interrupted)Jamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errorsAADSTS50105 EntitlementGrantsNotFoundJamf Connect login windowJamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errorsAADSTS50105: The signed in user is not assigned to a role for the applicationMicrosoft Entra sign-in page / sign-in logJamf Pro SSO with Microsoft Entra ID (SAML): setup, failover login and AADSTS errorsAADSTS50126 InvalidUserNameOrPasswordJamf Connect / Microsoft Entra sign-in logJamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errorsAADSTS53000 DeviceNotCompliantJamf Connect login windowJamf Connect with Microsoft Entra ID: app registration, login window and AADSTS errorsTell me which integration or error you'd like covered next — the Jamf subsection grows from readers' questions.