Double login prompts and password sync issuesSolved

Participant
Discussion
5 months ago Oct 20, 2025

Hey everyone. Running into a weird issue with Hexnode Access on our macs. We have FileVault enabled, and users are getting double prompted at boot—first the native Filevault screen, then the Hexnode login. 

I tried disabling Filevault on a test machine to see what would happen. It fixed the double prompt, and the Hexnode Access screen took over the login window beautifully. But now, the cloud password isn’t syncing to the local account, even though the usernames are identical. Has anyone run into this password sync issue? 

Replies (2)

Marked SolutionPending Review
Participant
5 months ago Oct 21, 2025
Marked SolutionPending Review

Hey wilma. The double prompt with FileVault is actually expected Apple behavior. FileVault requires pre-boot authentication, meaning it needs the local password to decrypt the disk before the Os can even load the Hexnode Access screen or connect to the network. 

As for the password sync failing, I had the exact same headache. I ended up opening a ticket with Hexnode support and they gave me the fix. In your Hexnode Access policy settings, you need to enable two specific options: “Migrate local account to network accounts” and “Allow offline access”. 

Marked SolutionPending Review
Participant
5 months ago Oct 23, 2025
Marked SolutionPending Review

@casper is spot on here. If you don’t check “Migrate local account to network accounts”, macOS doesn’t officially bind that cloud IdP account to the existing local profile. That’s why your passwords aren’t syncing, despite the usernames matching. 

And you definitely want “Allow offline access” checked regardless. Without it, if a user reboots their Mac while away from Wi-Fi (like on a plane or before they can accept a hotel’s captive portal), they will be completely locked out of the machine. Checking both of those boxes smoothed out our entire login flow and fixed the sync bugs. 

Save