Microsoft Entra ID
AuthenticationDevice Join Macos Platform Single Sign On Kerberos Configuration
In brief
The documentation expands access from limited availability and updates setup links. It also clarifies that the storage account app registration must use a lowercase `cifs` identifier URI for SMB mounting on macOS.
What Entra admins need to know
Administrators configuring this integration should use the lowercase `cifs` prefix; an uppercase `CIFS` value prevents macOS from mounting the share.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Use Cloud Kerberos TGT to access Azure File Storage
Cloud TGTTGTs issued through Platform SSO enable seamless access to Azure file shares without prompting users for interactive credentials. Please note that accessAccess to Azure file shares by using the PSSOPlatform SSO Kerberos TGT feature is currently in limitedpublic preview. If you're interested in trying it out, reach out to [email protected] for onboarding support.
If you need guidance on configuring a cloud file share in Azure Files, please refer to this guideFor setup steps, see Enable Microsoft Entra Kerberos authentication for Azure Files on macOS with Platform SSO.
Known Issues
Known Issues
@@ -271,11 +271,10 @@ Validate your configuration is working by testing with appropriate Kerberos-capa ## Use Cloud Kerberos TGT to access Azure File Storage -Cloud TGT issued through Platform SSO enable seamless access to Azure file shares without prompting users for interactive credentials. Please note that access to Azure file shares using the PSSO Kerberos TGT feature is currently in limited preview. If you're interested in trying it out, reach out to [email protected] for onboarding support.-If you need guidance on configuring a cloud file share in Azure Files, please refer to [this guide](/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable).+Cloud TGTs issued through Platform SSO enable seamless access to Azure file shares without prompting users for interactive credentials. Access to Azure file shares by using the Platform SSO Kerberos TGT is in public preview. For setup steps, see [Enable Microsoft Entra Kerberos authentication for Azure Files on macOS with Platform SSO](/azure/storage/files/identity-kerberos-authentication-macos). > [!NOTE]-> When mounting the file share via SMB, ensure that the manifest file associated with the app registration for Azure File Share includes the `cifs` mapping in **lowercase**. If this value is set to uppercase `CIFS`, it may lead to issues during the mounting process.+> When you mount the file share over SMB, make sure that the identifier URI in the storage account's app registration uses a lowercase `cifs` prefix. If it uses an uppercase `CIFS` prefix, macOS can't mount the share. For steps, see [Update the app registration identifier URI](/azure/storage/files/identity-kerberos-authentication-macos#update-the-app-registration-identifier-uri). ## Known Issues