MacOS InTune-Enrolled Device. Keychain Access to 'Microsoft Workplace Join Key'

Gary Leung 6 Reputation points
2022-08-17T14:55:37.763+00:00

I have a MacBook with Monterey OS that is enrolled through Intune. For some reason when the user attempts to access SharePoint online through Google Chrome she receives a prompt "Google Chrome wants to sign using key "Microsoft Workplace Join Key" in your keychain. Even if she selects Always Allow, she gets prompted again.

232102-microsoftteams-image.png232103-microsoftteams-image-1.png

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,252 questions
{count} vote

3 answers

Sort by: Most helpful
  1. Cyril Golé 1 Reputation point
    2022-11-02T09:50:02.76+00:00

    It comes from the keychain ACL for Microsoft Workplace Joinkey. By default, all microsoft apps can access it (com.microsoft and Microsoft portal). Obviously here Chrome, is used to access to Sharepoint. It might be the same for other apps used to enter a microsoft site.

    0 comments No comments

  2. Cyril Golé 1 Reputation point
    2022-11-02T09:50:43.97+00:00

    you can add Chrome to the keychain ACL.


  3. Hugo Salazar 5 Reputation points
    2024-04-09T16:40:14.4+00:00

    This happened in my environment when I created a persistent session conditional access policy and set it to report-only mode.

    Disabling the policy resolved the issue.

    0 comments No comments