diff --git a/intune/intune-service/configuration/platform-sso-macos.md b/intune/intune-service/configuration/platform-sso-macos.md
index 8eb13ddd77..d8964af069 100644
--- a/intune/intune-service/configuration/platform-sso-macos.md
+++ b/intune/intune-service/configuration/platform-sso-macos.md
@@ -229,7 +229,7 @@ To configure the Platform SSO policy, use the steps in this section to create an
| **Authentication Method (Deprecated)** (macOS 13 only) | **Password** or **UserSecureEnclaveKey** | Select the Platform SSO authentication method that you chose in [Step 1 - Decide the authentication method](#step-1---decide-the-authentication-method) (in this article).
This setting applies to macOS 13 only. For macOS 14.0 and later, use the **Platform SSO** > **Authentication Method** setting.|
| **Extension Identifier** | `com.microsoft.CompanyPortalMac.ssoextension` | Copy and paste this value in the setting.
This ID is the SSO app extension that the profile needs for SSO to work.
The **Extension Identifier** and **Team Identifier** values work together. |
| **Platform SSO** > **Authentication Method** (macOS 14+) | **Password**, **UserSecureEnclaveKey**, or **SmartCard** | Select the Platform SSO authentication method that you chose in [Step 1 - Decide the authentication method](#step-1---decide-the-authentication-method) (in this article).
This setting applies to macOS 14 and later. For macOS 13, use the **Authentication Method (Deprecated)** setting. |
- | **Platform SSO** > **FileVault Policy** (macOS 15+) | **AttemptAuthentication** | This setting allows the device to verify the Microsoft Entra ID password with Microsoft Entra at the FileVault unlock screen when a Mac device is turned on.
This setting applies to macOS 15 and later. |
+ | **Platform SSO** > **FileVault Policy** (macOS 15+) | **AttemptAuthentication** | This setting allows the device to verify the Microsoft Entra ID password with Microsoft Entra at the FileVault unlock screen when a Mac device is turned on.
This setting applies to macOS 15 and later.
This setting requires that you also configure the **Password** `AuthenticationMethod` setting. |
| **Platform SSO** > **Use Shared Device Keys** (macOS 14+) | **Enabled** | When enabled, Platform SSO uses the same signing and encryption keys for all users on the same device. Users upgrading from macOS 13.x to 14.x are prompted to register again. |
| **Registration token** | `{{DEVICEREGISTRATION}}` | Copy and paste this value in the setting. You must include the curly braces.
To learn more about this registration token, go to [Configure Microsoft Entra device registration](/entra/identity-platform/apple-sso-plugin#configure-microsoft-entra-device-registration).
This setting requires that you also configure the `AuthenticationMethod` setting.
- If you use only macOS 13 devices, then configure the **Authentication Method (Deprecated)** setting.
- If you use only macOS 14+ devices, then configure the **Platform SSO** > **Authentication Method** setting.
- If you have a mix of macOS 13 and macOS 14+ devices, then configure both authentication settings in the same profile. |
| **Screen Locked Behavior** | **Do Not Handle** | When set to **Do Not Handle**, the request continues without SSO. |