Addigy offers multiple Identity solutions which can cause confusion when trying to understand what each option does. Below is a detailed breakdown of each:
| Feature | For Who | What It Does | Where | When | Main Use Cases | IdP Support |
| Addigy Identity | End Users | Login to Mac + sync local password with IdP password | macOS login screen | Every login | Mac login with company credentials and company branding |
|
| Enrollment SSO | End Users | Authenticate during device setup | Apple Setup Assistant | First time device is turned on | Prevents unapproved users from enrolling devices |
|
| Extensible SSO | End Users | Automatic app and website login | Apps + websites | First time each app/site is opened | Seamless access to work apps and websites |
|
| Platform SSO | End Users | Native Mac login + app and website login with IdP account | macOS login screen + apps and websites | Every login | Seamless login and authentication |
|
| Web App SSO | Admins | Sign into Addigy with IdP account | http://app.addigy.com | Anytime | Admins can login to Addigy with their work account |
|
Addigy Identity
Addigy Identity replaces the default Mac login screen with one connected to your identity provider. It supports just-in-time account creation, password sync, fallback to local login, and branding per policy. To learn more and to configure view our Addigy Identity Overview article.
Enrollment SSO
Enrollment SSO prompts users to authenticate with your IdP during device setup. It ensures only authorized users can enroll devices into Addigy. This feature works on macOS, iOS, iPadOS, tvOS, and Shared iPad. To learn more and to configure view our Enrollment SSO for Automated Device Enrollment article.
Extensible SSO
Extensible SSO is an SSO extension managed through MDM using a MDM profile. It enables one-time sign-in for apps and web services using your identity provider. Supports redirect or credential-based auth, MFA, iCloud Keychain, per-app VPN, and optional Kerberos. To learn more and to configure view our Extensible SSO article for Entra on macOS and iOS/iPadOS.
Platform SSO
Platform SSO is a macOS feature that lets users sign in to their Mac using their Identity Provider credentials and then automatically sign in to other apps and services that use the same credentials. Platform SSO also supports just-in-time account creation during Setup Assistant. To learn more and to configure view our Platform SSO for Entra and Platform SSO for Okta articles.
Web App SSO
Web App SSO allows admins to sign into their Addigy environment using their identity provider credentials. This centralizes access control and ensures secure, role-based access to Addigy. To learn more and to configure Web App SSO view our Entra, Google, and Okta articles.