Merge pull request #19370 from iye-ms/patch-1

Enhance macOS endpoints guide with SSO and optimization tips

Author: MandiOhlinger

intune/solutions/end-to-end-guides/macos-endpoints-get-started.md

@@ -1,7 +1,7 @@
 ---
 title: Get started with macOS endpoints
 description: Microsoft Intune guide to set up and configure macOS devices from setup to creating policies and enrolling devices. You secure your corporate and organization-owned endpoints that are enrolled in Intune, and then deploy at scale with Apple Business Manager or Apple School Manager.
-ms.date: 07/31/2025
+ms.date: 01/22/2026
 ms.topic: get-started
 ms.reviewer: scbree;rogerso
 ms.collection:
@@ -196,6 +196,8 @@ In Intune, you can configure settings that reduce the number of sign-in prompts
 
   Platform SSO builds on top of the existing capabilties in the Enterprise SSO plug-in. Platform SSO allows for device-bound credentials, smart card or password sync authentication options. On macOS 14, Platform SSO also supports creating new user accounts from the macOS login screen.
 
+  Platform SSO is the most secure approach for device attestation and registration. Microsoft recommends you enforce using Platform SSO during device registration, as it's considered a best practice for a Zero Trust security strategy. It ensures strong device identity and replaces traditional registration typically done through the Company Portal.
+
   For more information, go to:
 
   - [Configure Platform SSO for macOS devices in Microsoft Intune](../../intune-service/configuration/platform-sso-macos.md)