Declarative Device Management notes

Field Notes about Declarative Device Management from mdm.tools.

• Platform SSO can be passwordless. It can also satisfy MFA. Jul 2026
• The one PPPC change in macOS 27 that actually breaks a workflow Jul 2026
• They removed the alternative: the macOS 27 change that isn't PPPC Jul 2026
• The PPPC obituaries are early: what macOS 27 actually moved off the profile Jul 2026
• The management model changed under us: what macOS 27 moved to declarative Jul 2026
• I scanned one Mac and found 30+ AI tools: a Jamf EA for shadow AI Jul 2026
• A '.2' update just shipped 38 CVEs: read the release notes Jun 2026