Macjutsu/pseudo v1.0.0-beta6

on GitHub

2026-06-12

Highlights (1.0.x)

• Automatically installs swiftDialog to provide customizable user messaging. (Thanks to @bartreardon for his dedication to the project!)
• Automatically (optionally) opens the Touch ID System Settings and then focuses the macOS user interface (by forcefully hiding all other applications) until Touch ID is enabled.
• Automatically opens the Platform SSO registration window and then focuses the macOS user interface (by forcefully hiding all other applications) until Platform SSO is registered.
• Automatically enables relevant AutoFill password extensions.
• For computers managed by Jamf Pro, automatically (optionally) start Device Compliance registration and update computer inventory.
• For computers managed by Workspace ONE, automatically (optionally) update Workspace ONE computer inventory and sensors.
• Detailed and easy-to-read command line feedback and local logging at /var/log/pseudo.log.

Compatibility Notes (1.0.x)

• pseudo requires macOS 15 or newer.
• pseudo requires system (root) privileges.
• pseudo is compatible with Platform SSO workflows via Microsoft (Entra ID) Company Portal and Okta Verify.
• pseudo requires a PPPC configuration profile granting specific permissions for the process that starts the pseudo script:
  • Allow use of Accessibility.
  • Allow sending AppleEvents to com.apple.finder, com.apple.systemuiserver, and com.apple.systemevents.
• The Pseudo-Sidekicks folder contains useful related items including:
  • Example PPPC configuration profiles.
  • Management inventory attribute scripts.

Known Issues (1.x)

• The pseudo workflow has not been thoroughly tested on macOS 15.

Specific Changes (1.0.0-beta6)

• Fully verified Platform SSO workflows for both Okta Password and Secure Enclave authentication methods. (A special shout out to the Okta account team for providing a trial Okta tenant with Device Access!)
• New support for running pseudo without a PPPC configuration profile. In this case, the workflow does not enforce Touch ID or Platform SSO registration, but it can validate the system configuration and update management inventories. Thus, you can run psuedo after the user completes an automatic enrollment with Platform SSO Simplified Setup to verify the configuration and update inventory.
• New optional LOG_PPPC_STATUS parameter provides additional PPPC permissions details to aide in troubleshooting your configuration. Setting this paramater to any other value besides "TRUE" will disable this option.
• New optional UPDATE_JAMF_PRO_USERNAME parameter allows you to control the option to submit the current Platform SSO enabled username to the Jamf Pro computer inventory username. Setting this paramater to any other value besides "TRUE" will disable this option.
• New optional UPDATE_JAMF_PRO_COMPLIANCE parameter allows you to control the option to validate that the Jamf Pro device compliance (conditional access) registration has completed. Setting this paramater to any other value besides "TRUE" will disable this option.
• Enabling the optional REPAIR_MODE parameter no longer diasbles the Touch ID workflows.
• Updated workflow no longer checks for user focus modes since this is unnecessary given the new System Settings method.
• Significantly updated Jamf Pro Extension Attribute script to collect Platform SSO registered users the Pseudo-Sidekicks folder.
• Countless typo fixes and improvements for dialogs and log output.
• pseudo 1.0.0-beta5 SHA-256: d433e139b4657015c81028b73c6ca0988f44d5daa6687183ee5c32a66435d5e5

Please refer to the Change log for full details.