XCreds - Log in to your Mac with your Cloud Password (macOS)

Overview

XCreds supercharges your Mac login window. Use your Azure, Google Cloud, Okta or any OpenID Connect password to log in to your Mac. XCreds verifies the password with your identity provider and saves the tokens to the user keychain for validation that the cloud password is in sync with the local password. Perfect. This article will show you how to use it with FileWave.

Getting Started

You'll want to review their Pricing ( https://twocanoes.com/products/mac/xcreds/#pricing ) but it's very reasonable and you can download the software and get started for free.

Download the latest PKG: Download XCreds
Review the Admin Guide: XCreds Admin Guide
Once you purchase take a look about the license file: Install Software License Configuration Profile
Depending on the directory system you use:
- Azure - XCreds Setup with Azure OIDC
- Okta - XCreds Setup with Okta
- Google - XCreds Setup with Google OIDC

Installing with FileWave

xcreds_example_azure.mobileconfig - From John Brigham - example config for Azure
PKG - XCreds_Build-3347_Version-2.2 1.fileset.zip - From John Brigham a fileset to look at that might be used here

This looks like from what John had that it's a PKG installer that includes a configuration file. The Requirements script looks for the mobileconfig to be installed and so these 2 components of fileset + profile work together. It looks straightforward.

Features

Login Window log in to OIDC provider
Support for Azure, Google Cloud, Okta and any OIDC provider
Initial account provisioning
WiFi Login Window configuration
Restart and shutdown from Login Window
Profile manifest available for easy configuration
Local password update with IdP password
Prompt for IdP password when changed
Login Keychain password updating
Customizable preferences
Easy deployment
Uses OpenID Connect

Attractive and pleasing menu icon
Easy configuration with profile / MDM
Profile Manifest for Profile Creator Support
Two-Factor and Multi-Factor support
New username and password window
Able to create a user as an admin using group member preference
Kerberos ticket
Switch to login window at screensaver
Reset keychain
Most preferences are now able to be overridden
Added shake to the password field

Support

The twocanoes Software Knowledge Base is located at https://twocanoes.com/knowledge-base/ but you can also chat on our FileWave Discord Server with other customers as well.