We have been working with Microsoft's MSAL team on these errors we are seeing. Info 20:09:02.654443 -0400 JamfAAD TID=3027778 MSAL 1.1.2 Mac 10.15.7 Beginning interactive, , and if you have examples that you can pull a full sudo sysdiagnose -f ~/Desktop archive from if you want to open a Support case and upload the logs with a rough time (to speed up Console filtering) of when the prompt came up they could be helpful in the investigation.Īn update for anyone following this thread.

Result (null), error: -1200 error domain: NSURLErrorDomain Info 18:08:57.394824 -0400 JamfAAD Sending AAD ID to jamf daemonĪ bad auth. Result (not-null), error: 0 error domain: (null)ĭefault 18:08:57.394774 -0400 JamfAAD AAD ID acquired for macOS user account bob.lutz In a number of logs I have been looking over we can see examples of this.Ī good auth. that MSAL does on daily checks (that the jamfAAD Launch Agent does ( more on that here)) fail to stay silent when it should be. What I am working to determine is why for some macOS clients does the silent token auth. In all other scenarios (EX: Monday the 4th to Tuesday the 4th where the Mac was on and the user used it both days and did not change their password and the session was not expired) it should not prompt.

The pop ups ARE expected in the case of say a new registration where a token does not already exist for authentication, and they would be expected in the case of a password change or session expiration (Global default from AAD is 14 days out of box but can be changed). On Jamf Pro v10.21 - v10.23 MSAL v1.0.7 was in use and it did not require the ASWebAuthenticationSession to be launched (the prompt that macOS is giving to redirect to Microsoft for login). In Jamf Pro v10.24 and up the library was updated to v1.1.2. That is a separate set of Enterprise Apps that do the server side (Graph API) and client side (Authenticator app) call is correct that the reason this is taking place is due to the change in the MSAL library that is used for authentication. It does not have anything to do with iOS Device Compliance.

Activity center mac what is jamf