The guide now warns that first-time password writeback enablement may generate password change events 656 and 657 during password hash resynchronization. It also clarifies steps for stopping cloud sync writeback or all password writeback.
Day in brief
macOS Platform SSO guidance ties Shared Device Keys to wake errors and re-registration
The strongest administrator-facing update is a tighter macOS Platform SSO troubleshooting path: for macOS 14 or later, Microsoft recommends Use Shared Device Keys for lock or wake authentication errors and notes that changing the setting triggers device re-registration. Other updates clarify password writeback telemetry and remove a Zendesk OAuth timing target while retaining the exception process.
- Shared Device Keys guidance adds wake and unlock troubleshooting details
Entra ID · TroubleshootingThe macOS Platform SSO troubleshooting guidance recommends enabling Use Shared Device Keys on macOS 14 or later for authentication errors after locking or waking a Mac. Changing the setting in an existing deployment triggers device re-registration with Microsoft Entra ID.
- Zendesk tutorial removes its mid-December 2026 OAuth target
Entra ID · ProvisioningThe Zendesk provisioning tutorial no longer lists a mid-December 2026 target for OAuth client credentials authentication. It still says support is being introduced and directs customers to the exception process in the meantime.
- Password writeback guidance identifies first-enable event codes
Entra ID · AuthenticationThe guide now warns that initial password writeback enablement can generate password change events 656 and 657 during password hash resynchronization. It also clarifies how to stop cloud sync writeback or all password writeback.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
6 updates
Microsoft Entra ID
6 updatesThe macOS Platform SSO troubleshooting guidance now states that changing Use Shared Device Keys in an existing deployment triggers device re-registration with Microsoft Entra ID.
The documentation now states that changing this setting in an existing deployment triggers a Platform SSO re-registration.
Troubleshoot Macos Platform Single Sign On Extension
Doc updateAction requiredThe page now explains authentication errors after locking or waking a Mac and recommends enabling Use Shared Device Keys on macOS 14 or later. Changing this setting triggers device re-registration with Microsoft Entra ID.
The authentication-error section now briefly describes wake/unlock sign-in errors and recommends enabling Use Shared Device Keys on macOS 14 or later, with a link to Intune configuration guidance. Detailed rollout, verification, and diagnostic steps were removed.
Zendesk Provisioning Tutorial
Doc updateThe tutorial no longer lists a mid-December 2026 target for OAuth client credentials authentication. It continues to state that support is being introduced and that customers can use the exception process meanwhile.