macOS PSSO extension development

Question

ankitraj1996 OP

Created Aug ’24

Replies 0

Boosts 0

Participants 1

Hey guys, I have recently started with developing an extension to support PSSO, I am at a very initial stage and trying out device registration. I am trying to fetch the registration token in my MDM profile but when running in debug mode I don't see the token , and also when I see the console log I see errors like

error	14:44:00.465847+0530	AppSSODaemon	Error Domain=com.apple.PlatformSSO Code=-1004 "no device configuration data to load" UserInfo={NSLocalizedDescription=no device configuration data to load}
error	14:44:00.466434+0530	AppSSOAgent	Error Domain=com.apple.PlatformSSO Code=-1004 "no device configuration" UserInfo={NSLocalizedDescription=no device configuration}, user
default	14:44:00.466145+0530	AppSSODaemon	-[PODaemonProcess deviceConfigurationForIdentifer:completion:] identifer = 96DBA2E4-6DB8-4937-85A8-69F7632B8717 on <private>
error	14:44:00.466773+0530	SSO extension	Error Domain=com.apple.PlatformSSO Code=-1001 "failed to retrieve SecKeyProxyEndpoint for key" UserInfo={NSLocalizedDescription=failed to retrieve SecKeyProxyEndpoint for key, NSUnderlyingError=0x14b608820 {Error Domain=com.apple.PlatformSSO Code=-1001 "Failed to receive key proxy endpoint." UserInfo={NSLocalizedDescription=Failed to receive key proxy endpoint.}}}

I think due to some reason the PSSO process is not able to get the token from my configuration.

And this is how my configuration profile looks like

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>ExtensionIdentifier</key>
            <string>com.test.PSSO.SSO-extension</string>
            <key>PayloadDisplayName</key>
            <string>ingle Sign-On Extensions</string>
            <key>PayloadIdentifier</key>
            <string>com.apple.extensiblesso.96DBA2E4-6DB8-4937-85A8-69F7632B8717</string>
            <key>PayloadType</key>
            <string>com.apple.extensiblesso</string>
            <key>PayloadUUID</key>
            <string>CDC67F3E-0687-4796-95B0-A61EF6F3F9A7</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>TeamIdentifier</key>
            <string>my_team_identifier</string>
            <key>Type</key>
            <string>Redirect</string>
            <key>RegistrationToken</key>
            <string>dummy_token_123</string>
            <key>PlatformSSO</key>
            <dict>
                <key>AuthenticationMethod</key>
                <string>Password</string>
                <key>EnableAuthorization</key>
                <true/>
                <key>EnableCreateUserAtLogin</key>
                <true/>
                <key>NewUserAuthorizationMode</key>
                <string>Standard</string>
                <key>UseSharedDeviceKeys</key>
                <true/>
                <key>UserAuthorizationMode</key>
                <string>Standard</string>
            </dict>
            <key>URLs</key>
            <array>
                <string>my_url</string>
            </array>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>SSOE</string>
    <key>PayloadIdentifier</key>
    <string>com.test.psso.configuration</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>0DC6670F-F853-49CB-91B3-1C5ECB5D3F46</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

Boost