ZTNA sso sign in for macOS
I have a setup where the Fortigate has Microsoft Entra Single Sign-On as an authentication scheme and a ZTNA setup that uses groups from that. The devices are Entra joined Intune managed, and synced and verified to the Forticlient EMS server.
Everything works when using Windows devices. It automatically knows who the user is, matches the groups he is in and allows access to whatever is setup on the proxy policy.
But when i do it for macOS devices, it doesn't work.
I am having issues understanding what this means from the documentation
FortiClient (macOS) does not support native Entra ID integration with EMS. For the integration to work, macOS endpoints must be managed by Intune or JAMF and enrolled to company portal using Entra ID.
For the integration to work macOS endpoints must be managed by Intune and enrolled to the company portal using Entra ID.
My mac device is managed by Intune and enrolled to the company portal using Entra ID (though it is also setup with an Apple Business Manager).
But i can't use the groups.
The only weird thing i see is on the forticlient, the domain field is blank.