Macjutsu/pseudo v1.0.0-beta5

on GitHub

2026-04-28

Highlights (1.0.x)

• Automatically installs swiftDialog to provide customizable user messaging. (Thanks to @bartreardon for his dedication to the project!)
• Automatically (optionally) opens the Touch ID System Settings and then focuses the macOS user interface (by forcefully hiding all other applications) until Touch ID is enabled.
• Automatically opens the Platform SSO registration window and then focuses the macOS user interface (by forcefully hiding all other applications) until Platform SSO is registered.
• Automatically enables relevant AutoFill password extensions.
• For computers managed by Jamf Pro, automatically (optionally) start Device Compliance registration and update computer inventory.
• For computers managed by Workspace ONE, automatically (optionally) update Workspace ONE computer inventory and sensors.
• Detailed and easy-to-read command line feedback and local logging at /var/log/pseudo.log.

Compatibility Notes (1.0.x)

• pseudo requires macOS 15 or newer.
• pseudo requires system (root) privileges.
• pseudo is compatible with Platform SSO workflows via Microsoft (Entra ID) Company Portal and Okta Verify.
• pseudo requires a PPPC configuration profile granting specific permissions for the process that starts the pseudo script:
  • Allow use of Accessibility.
  • Allow sending AppleEvents to com.apple.finder, com.apple.systemuiserver, and com.apple.systemevents.
• The Pseudo-Sidekicks folder contains useful related items including:
  • Example PPPC configuration profiles.
  • Management inventory attribute scripts.

Known Issues (1.x)

• User focus modes disable the Platform SSO notification, as such the pseudo script will not be able to open the notification.
• The pseudo workflow has not been thoroughly tested on macOS 15.
• The pseudo workflow has not been thoroughly tested with Okta Platform SSO.

Specific Changes (1.0.0-beta5)

• New mechanism to open the Platform SSO registration via System Settings. This new method is faster, more reliable, and allows for repairing the Platform SSO registration. (Thanks to @sebLuns for help developing this new method!)
• New optional parameter REPAIR_MODE always runs the Platform SSO registration workflow even if the account was previously registered. This mode also skips the Touch ID workflow and the dialog that asks the user to start the Platfrom SSO registration. Setting this paramater to any other value besides "TRUE" will disable this option.
• New TIMEOUT_DIALOG_SECONDS=60 parameter defines the specific timeout for waiting for the user to respond to swiftDialog.
• New TIMEOUT_OPEN_SECONDS=10 parameter defines the specific timeout for opening a system dialog. This should generally only be a few seconds.
• Updated parameter name (to better align with other names) TIMEOUT_WORKFLOW_SECONDS=300 defines the timeout for an entire workflow.
• Updated Touch ID workflow can run independent of Platform SSO workflow. This allows you to enforce or encourage Touch ID without Platform SSO.
• New error detection of conflicting Touch ID restrictions from a configuration profile.
• Updated Okta Platform SSO registration workflow allows the user's default browser to re-open in order to facilitate browser-based registration.
• Updated swiftDialog 3.0.1 is automatically installed. (Thanks to @bartreardon for his dedication to the project!)
• Countless typo fixes and improvements for dialogs and log output.
• pseudo 1.0.0-beta5 SHA-256: 45b44c58b594da849463d64ae44fdf2e0149e1d5826ea2084414ae24092cadb0

Please refer to the Change log for full details.