Prerequisites

Requirements:
- Organization’s SSO account (e.g., Google Workspace, Microsoft Entra ID)
- Admin access on the target Mac device

Before You Start

SSO Enrollment provides a secure and streamlined way to enroll corporate Mac devices using your organization’s existing Single Sign-On (SSO) provider. This ensures centralized identity management, security compliance, and simplified access control without requiring manual pairing or credential entry.

Once completed, your Mac will automatically register with Trio and apply assigned profiles, apps, and policies according to company configurations.

The Mac SSO enrollment video guide could be found here.

Step 1: Launch the Trio Agent and Select Ownership

Install and open the Trio Agent on your macOS device.
Click Continue Enrolling Device when the welcome screen appears.
Select Company-Owned Device (COD) as the ownership type.

Step 2: Authenticate the Device

Enter your macOS device password when prompted.
Type your organization’s domain URL (e.g., orgname.trio.so) to initiate SSO connection.

Step 3: Choose SSO Enrollment Method

Select SSO Enrollment as your enrollment method.
From the available options, choose your provider — e.g., Continue with Google or Continue with Microsoft.
Proceed to your provider’s login portal.

Step 4: Sign In with SSO Account

On the redirected login page, select your organization email account.
Complete authentication using your standard sign-in method or passkey verification.
If prompted, choose “More ways to verify” to complete sign-in using your preferred factor (authenticator app, SMS, or hardware key).

Step 5: Confirm Authentication

Once authentication is verified, the SSO provider may request a confirmation code.
Retrieve the code from your IT admin or your organization’s SSO dashboard.
Enter the code to finalize verification.

Step 6: Complete Enrollment

After successful authentication, you’ll see a confirmation message: Device enrollment successful.
Open System Settings → General → VPN & Device Management.
Select the Trio MDM Profile, then click Install.
Wait until the installation completes and the device connects to Trio.