Single Sign On Extension Payload is not valid for the user channel on macOS 10.15 devices

We are seeing ...
<dict> <key>CommandUUID</key> <string>43abc5e2-60a8-4fef-8375-0c3bc530573b</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>1</integer> <key>ErrorDomain</key> <string>SingleSignOn</string> <key>LocalizedDescription</key> <string>The profile is a user profile but contains a “Single Sign On Extension” payload which is only valid in device profiles.</string> </dict> </array> <key>NotOnConsole</key> <false/> <key>Status</key> <string>Error</string> <key>UDID</key> <string>3297AA46-0711-5788-8161-FB41629845AF</string> ... pushing a Single Sign On Extension Payload on the user channel for macOS 10.15 devices.

The same payload works on the user channel works for macOS 11.

We have created a Feedback ticket https://feedbackassistant.apple.com/feedback/8799075
This is expected behaviour, the SSO payload being accepted on the user channel is a new feature in macOS Big Sur.
Single Sign On Extension Payload is not valid for the user channel on macOS 10.15 devices
 
 
Q