Account Security Problems

Fix macOS Keychain Prompt for Microsoft Workplace Join Key

Maira Mehtab Sep 22, 2026 868 views

Question details

Intune-enrolled Mac users are repeatedly prompted by browsers to grant access to the Microsoft Workplace Join Key in their macOS Keychain.

Product: Microsoft Intune / macOS
Device & OS: macOS
Scenario: Using web browsers such as Safari, Chrome, or Edge on an Intune-enrolled Mac device.
Observed behavior: Repeated macOS Keychain prompts appear requesting access to the Microsoft Workplace Join Key, interrupting normal web browsing and authentication flows.

Before you start

Ensure you have administrator access to your Mac and your Microsoft 365 admin center credentials handy, as resolving this issue may require checking system configurations or contacting Microsoft support.

Solution 1Recommended

Review Keychain Access Controls and Certificates

Verify and fix potential issues with corrupted entries, untrusted certificates, or incorrect permissions in your Mac's Keychain Access.

The prompt often triggers when the browser attempting to authenticate is not listed in the Keychain's Access Control list for the Microsoft Workplace Join Key. Correcting these permissions or removing corrupted certificates can resolve the loop.

Open Keychain Access

Navigate to your Mac's Applications folder, open the Utilities folder, and launch the Keychain Access application.

Locate the Join Key

Use the search bar in the top right corner to search for 'Microsoft Workplace Join Key'.

Modify Access Control

Double-click the key entry and select the 'Access Control' tab. Ensure that your preferred browsers (Safari, Chrome, or Edge) are added to the list of applications allowed to access this item.

Check Certificates

Clear the search and look for any expired or untrusted certificates related to Microsoft Intune. If found, consult your IT administrator about removing or renewing them.

Administrator Privileges Required: You will need to enter your Mac administrator password to modify Keychain access controls or delete certificates.

Solution 2

Open a Support Request with Microsoft 365

If keychain entries and Intune policies seem correct locally, escalate the issue to Microsoft Support for specialized investigation of conditional access configurations.

Free Microsoft Office alternative

Switch to WPS Office for a Seamless Experience

Tired of complex Microsoft 365 configurations and account prompts? WPS Office offers a free, lightweight, and user-friendly alternative that is fully compatible with Microsoft Word, Excel, and PowerPoint formats without the hassle of Intune management.

1. Download the Installer: Visit the official WPS Office website and click the free download button for macOS.
2. Install WPS Office: Open the downloaded file and drag the WPS Office icon into your Applications folder.
3. Start Creating: Launch WPS Office and immediately start opening or editing your existing Microsoft Office documents.

Fully compatible with Microsoft Office formats like .docx, .xlsx, and .pptx.Lightweight design ensuring fast startup without complex Intune enrollment prompts.Free to use with a familiar, easy-to-navigate tabbed user interface.Seamless migration from Microsoft Office for macOS users.

microsoft office alternative - wps office

Frequently Asked Questions

What is the Microsoft Workplace Join Key?

It is a cryptographic key stored in the macOS Keychain used by Microsoft Intune to identify and authenticate enrolled devices securely when accessing organizational resources.

Why does my browser keep asking for the Workplace Join Key?

This usually happens if your browser is not listed in the Keychain's Access Control list for that key, or if there is an issue with corrupted keychain entries and untrusted certificates on your Mac.

Can I delete the Microsoft Workplace Join Key to stop the prompts?

Deleting the key is not recommended if your device is actively managed by your organization, as it may break your connection to Intune and block access to company resources. It is better to fix the access permissions.

How do I fix Intune conditional access issues on a Mac?

Conditional access issues often require your IT administrator to review Intune policies and device compliance logs from the Microsoft 365 admin center to ensure your Mac meets all organizational security requirements.