Okta Device Access: Can't register macbook device in the Company Portal

Hello @ValentinN.41748 (Customer)​ Thank you for posting on our Community page!

You are asking why the Microsoft Company Portal on your macOS devices shows "There was an issue registering your device" during Entra device registration, even though Okta Verify and Okta Device Access with the Platform Single Sign-On (PSSO) profile deployed through Intune register the device in Okta and the Company Portal app itself deploys and signs in correctly.

Summary: The Entra registration step is failing after the Okta PSSO registration succeeds, so the issue sits in the Platform SSO configuration and identity matching between Okta and Entra rather than in the Okta Verify deployment.

Root Cause: Okta Device Access handles the Okta side of Platform Single Sign-On, while Company Portal performs the Microsoft Entra device registration. The Entra step fails when the Platform SSO configuration, the user identity presented to Entra, or the device's Entra registration prerequisites are not aligned. Company Portal logs usually show the exact error.

Solution: Follow these steps in order:

1. Collect the Company Portal and Platform SSO logs from the affected Mac. Run the Console app, filter for process "AppSSOAgent" and "Company Portal" over the time of a failed registration attempt, and export the output. Also collect the logs at ~/Library/Logs/Microsoft/Intune if present.
2. Confirm that the user's User Principal Name (UPN) is identical in Okta and Entra ID. Mismatched UPNs or a different primary email are a common cause of Entra registration failure after a successful Okta registration.
3. Verify the Platform SSO profile in Intune includes the Microsoft Enterprise SSO plug-in settings that Entra device registration requires, and that the Okta profile is not overriding the Microsoft extension. Each Platform SSO extension must be configured with its own Team Identifier and bundle identifier as documented for your configuration.
4. Check that the Entra device registration settings allow the device's platform (macOS) and the user, under Entra ID → Devices → Device settings.
5. Remove and redeploy the Platform SSO profile on one test device after the changes above, then sign in to Company Portal and retry registration. Confirm the device appears in Entra ID → Devices with a registered state.
6. Open a support case with Okta if the Okta Device Access logs show a successful registration but the Entra step still fails. Support can review the Okta Device Access and Platform SSO configuration on your tenant. Include the exported logs, the affected device serial number, and the Okta tenant ID. Okta Support requires a paid org and a Customer Support Account ID for case creation.

Thank you for reaching out to our Community and have a great day!

--

Help others in the community by liking or hitting Select as Best if this response helped you.