How to Configure Apple Platform SSO with Omnissa Access

Last updated 12/10/2025

Introduction

This is part five of a six part blog series on how to configure Apple Platform SSO using Omnissa Workspace ONE Unified Endpoint Management (UEM). Each part of the blog covers the various vendor configuration options and the series wraps up with a blog dedicated to troubleshooting. As each vendor continues to change their implementation these blogs will be updated.

Part 1 – What is Apple Platform SSO

Part 2 – How to configure Apple Platform SSO for Kerberos with Microsoft AD or Microsoft Entra

Part 3 – How to configure Apple Platform SSO with Microsoft EntraID

Part 4 – How to configure Apple Platform SSO with Okta Desktop Password Sync

Part 5 – How to configure Apple Platform SSO with Omnissa Access

Part 6 – Troubleshooting

Prerequisites for Omnissa Access

This configuration applies to organizations that use Omnissa Access as the Identity Provider (IDP) or for organizations where Omnissa Access will broker for third party IDPs. This is a big deal because it means that IDPs like Ping Federate who do not offer a PSSO Extension app can now be used with PSSO.

This method does not currently support Secure Enclave for PSSO. This method is only available when PSSO is configured to use Password Sync. Future updates to Workspace ONE Access will enable support for Secure Enclave.

As of December 10th 2025 Workspace ONE Intelligent Hub for macOS 25.11 has been released. This is the first build of the Hub that includes the Apple PSSO extensions. You must use Hub 25.11 or higher to enable PSSO for use with Omnissa Access.

Does your organization plan to use Microsoft Conditional Access?