You can use the enrolled authenticators to log in to the Mac operating system. You must pass through the authenticators in the chain to get authenticated.
To log in to Mac with the Advanced Authentication, perform the following steps:
Select a user from the Mac login screen or specify the user name in the Other user screen.
NOTE:You can switch between languages by clicking the flag icon beside the text box.
Click Next.
Select an authentication chain from the list.
Authenticate with the preferred authentication method(s) of the chain.
A prompt to select category might appear, if you have enrolled an authenticator for more than one category.
NOTE:If you log in to a non-domain joined workstation for the first time, you will be asked to provide credentials for your local account to map the domain account to the local account. In username, specify the username of local account. In the next step, specify the local account's password.
A domain user cannot log in, if a local user with the same username exist. For example, Mac OS has a local user Bob and a domain user mycompany\bob. Mac OS is joined to the domain Mycompany. After specifying the username of the domain user mycompany\bob, selecting a chain, an error Network account name cannot be the same as local account name is displayed.
Advanced Authentication provides the following authenticators for logging in to Mac computer: