Saving Entra ID Credentials on macOS for TruGrid Sessions

When connecting to an Entra ID joined Windows host via TruGrid SecureRDP on macOS, you can store your Entra password in the macOS Passwords app and use Touch ID to fill it into the credential prompt. This removes the need to retype the password on every connection and avoids typos in the AzureAD\user@domain.com username format.

Requirements

• macOS Ventura or later. macOS Sonoma or later is recommended, as it ships the standalone Passwords app.
• Touch ID enabled on the Mac. If your Mac does not have Touch ID, you can authenticate the autofill action with your macOS account password instead, or use Apple Watch unlock if configured.
• Your Entra ID credentials, with the username in the format AzureAD\user@domain.com.
• TruGrid SecureConnect 2.0.0.8 or later installed on the remote host.
• NLA disabled on the remote host, unless you are using TruGrid SSO.

Step 1: Save the credential in macOS Passwords

1. Open the Passwords app. On macOS Ventura, open System Settings and go to Passwords.
2. Authenticate with Touch ID or your macOS account password.
3. Click the + button and select New Password.
4. Fill in the fields:

• Title: Microsoft 365, or any label you prefer.
• Website: login.microsoftonline.com
• User name: AzureAD\user@domain.com, replacing with your full Entra UPN.
• Password: your Entra ID password.

5. Save the entry.

The website field must be set to login.microsoftonline.com exactly. macOS uses this value to match the saved credential to the credential prompt at connection time. Subdomains or alternate URLs will not surface the entry in the autofill dropdown.

Step 2: Use the saved credential when connecting

1. Launch the TruGrid session to the Entra joined host. The macOS credential prompt appears, asking for username and password for the remote PC.
2. Click into the Username field. macOS displays an autofill suggestion above the field, with your saved entry listed under "From microsoftonline.com".
3. Hover the mouse over the suggestion. The Touch ID prompt activates.
4. Authenticate with your fingerprint, or with your macOS account password if Touch ID is unavailable.
5. Both the Username and Password fields populate automatically with the saved values.
6. Confirm the credential prompt to complete the connection.

Notes

• If you have multiple Entra accounts saved against login.microsoftonline.com, all of them appear in the suggestion list. Select the one that matches the host you are connecting to.
• When your Entra password changes, update the entry in the Passwords app. Stale saved credentials will produce repeated login failures, and enough failed attempts in a short window can lock the Entra account.
• If no suggestion appears when you click the Username field, the saved entry is either missing, keyed to the wrong website value, or the Passwords credential provider is disabled. Check System Settings > Passwords > Password Options and confirm AutoFill is enabled.
• iCloud Keychain syncs the saved credential to other Apple devices signed in to the same Apple ID. If you want the credential to stay local to one Mac, disable iCloud Keychain or save the entry into a non-synced keychain via Keychain Access.
• For environments where you want to remove credential prompts entirely, use TruGrid Entra ID login mode. This authenticates against Entra directly and does not require saving or entering a password on the Mac.

Updated on: 15/05/2026