GSA macOS client prerequisites and installation
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 125f9df · +18 −1 lines · also on GitHub
⋯ 1 unchanged line
22
title: The Global Secure Access Client for macOS
33
description: The Global Secure Access client secures network traffic at the end-user device. This article describes how to download and install the macOS client.
44
ms.topic: how-to
5
−ms.date: 07/30/2025
5
+ms.date: 02/21/2026
66
ms.author: jayrusso
77
author: HULKsmashGithub
88
ms.reviewer: lirazbarak
⋯ 33 unchanged lines
4242
4343
The client uses system extensions and a transparent application proxy that need to be approved during the installation. For a silent deployment without prompting the end user to allow these components, you can deploy a policy to automatically approve the components with mobile device management.
4444
45
+### Deploy with Microsoft Intune
46
+To deploy the Global Secure Access client .pkg through Microsoft Intune as a managed app:
47
+
48
+1. Download the GlobalSecureAccessClient.pkg file from the Microsoft Entra admin center.
49
+1. In the [Microsoft Intune admin center](https://intune.microsoft.com), select **Apps** > **All Apps** > **Create**.
50
+1. In the **Select app type** pane, under **Other** app types, select **macOS app (PKG)** and select **Select**.
51
+1. On the **App package file** tab, select **Select app package file**, browse to the GlobalSecureAccessClient.pkg file, and select **OK**.
52
+1. On the **App information** tab, fill in the required details and select **Next**.
53
+1. On the **Requirements** tab, set the minimum operating system to **macOS 13.0** and select **Next**.
54
+1. On the **Detection rules** tab, review the **Included apps** list to verify the Global Secure Access client app is detected correctly and select **Next**.
55
+1. On the **Assignments** tab, assign the app to the appropriate device or user groups and select **Next**.
56
+1. Review the configuration and select **Create**.
57
+
4558
### Allow system extensions through mobile device management (MDM)
59
+
60
+> [!IMPORTANT]
61
+> Previous versions of these instructions referenced the deprecated **Extensions** profile type. If your organization previously deployed system extensions using the **Extensions** profile, migrate to the **Allowed System Extensions** setting in the **Settings catalog** as described in the following steps.
62
+
4663
The following instructions are for [Microsoft Intune](/mem/intune/apps/apps-win32-app-management) and you can adapt them for different MDMs:
4764
4865
1. In the Microsoft Intune admin center, select **Devices** > **Manage devices** > **Configuration** > **Policies** > **Create** > **New policy**.
⋯ 240 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:13 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.