From a896ec3a8e3bd05aba407c0a4eeedd76ddf70bd4 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Wed, 2 Apr 2025 11:53:02 -0400 Subject: [PATCH] macOS setup experience guide (#27780) - Currently, Fleet only supports email --- articles/macos-setup-experience.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/macos-setup-experience.md b/articles/macos-setup-experience.md index 3d7e24b549..d419e422eb 100644 --- a/articles/macos-setup-experience.md +++ b/articles/macos-setup-experience.md @@ -26,7 +26,7 @@ Using Fleet, you can require end users to authenticate with your identity provid 1. Create a new SAML app in your IdP. In your new app, use `https:///api/v1/fleet/mdm/sso/callback` for the SSO URL. -2. In your new SAML app, set **Name ID** to email. Fleet will trim this email and use it to populate and lock the macOS local account **Account Name**. For example, a "johndoe@example.com" email turn into a "johndoe" account name. +2. In your new SAML app, set **Name ID** to email (required). Fleet will trim this email and use it to populate and lock the macOS local account **Account Name**. For example, a "johndoe@example.com" email turn into a "johndoe" account name. 3. Make sure your end users' full names are set to one of the following attributes (depends on IdP): `name`, `displayname`, `cn`, `urn:oid:2.5.4.3`, or `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name`. Fleet will automatically populate and lock the macOS local account **Full Name** with any of these.