Single Sign On with Edge InPrivate Browser

Question

Single Sign On with Edge InPrivate Browser

Raymond Brooks 366

Hi i've just setup SSO using the guide below and it mentions testing SSO using Edge in-private browser, however when i try this it take me to the usual login screen, SSO otherwise seems to the be working fine as i was able to create a new outlook profile without being prompted and in the normal browser session testing with myapps logs me in automatically.

Is Edge InPrivate supported? and if it is how do i go about troubleshooting this? Thanks

Updated***Answer is in comments

Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-03-31T14:22:02.6233333+00:00

Hello @Raymond Brooks
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-04-01T16:47:03.0166667+00:00

Hello @Raymond Brooks
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-04-04T13:36:23.1466667+00:00

Hello @Raymond Brooks
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

Accepted answer

0 additional answers

Your answer

Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-03-31T14:22:02.6233333+00:00

Hello @Raymond Brooks
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-04-01T16:47:03.0166667+00:00

Hello @Raymond Brooks
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-04-04T13:36:23.1466667+00:00

Hello @Raymond Brooks
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

Answer 1

Harshitha Eligeti 4,380 Microsoft External Staff Moderator

Hello @Raymond Brooks
I understand that you’ve set up SSO and tested it using Edge's InPrivate mode. However, when testing in InPrivate mode, you’re redirected to the regular login screen instead of being automatically signed in. Additionally, you were able to create the Outlook profile without being prompted, and when testing MyApps in a normal browser session, you’re logged in automatically.
Now you have questions about whether Edge InPrivate mode is supported, and if so, you're seeking guidance on troubleshooting the issue.

Edge InPrivate mode is not supported with SSO (Single Sign-On) testing. InPrivate browsing in Edge blocks the storage of cookies and session data, and since SSO relies on these cookies or session tokens to authenticate users, the system cannot recognize that you are already logged in. However, when you log into Edge with SSO in a regular browsing session, the system can detect your login because the session cookies are retained.

For Additional information refer these documents: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/tshoot-connect-sso#known-issues
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-security-identity#how-users-can-sign-into-microsoft-edge

I hope the response is helpful to you. Let us know if you any further queries. Happy to assist you further.

Raymond Brooks 366 Reputation points

2025-03-27T21:46:38.78+00:00
Hi that's a bit confusing as the SSO documentation says it is supported but Microsoft edge legacy isn't

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-quick-start#:~:text=Known%20browser%20limitations,Google%20Chrome

Known browser limitations

Seamless SSO doesn't work on Internet Explorer if the browser is running in Enhanced Protected mode. Seamless SSO supports the next version of Microsoft Edge based on Chromium, and it works in InPrivate and Guest mode by design. Microsoft Edge (legacy) is no longer supported.

You might need to configure AmbientAuthenticationInPrivateModesEnabled for InPrivate or guest users based on the corresponding documentation:

Microsoft Edge Chromium

Google Chrome

and it is mentioned as a test scenario:

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-quick-start#:~:text=To%20test%20a%20scenario%20in%20which%20the%20user%20doesn%27t,verified%20domain%20(not%20a%20federated%20domain)%20on%20your%20tenant.

To test a scenario in which the user doesn't have to enter a username or password, use one of these steps:

Sign in to https://myapps.microsoft.com/contoso.onmicrosoft.com. Be sure to either clear the browser cache or use a new private browser session with any of the supported browsers in private mode. Replace contoso with your tenant name.

Sign in to https://myapps.microsoft.com/contoso.com in a new private browser session. Replace contoso.com with a verified domain (not a federated domain) on your tenant.

The problem is I can't find AmbientAuthenticationInPrivateModesEnabled in the flags anywhere.
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-03-28T10:29:49.2833333+00:00

Hello @Raymond Brooks
Ensure that you are using Microsoft Edge version 77 or later to enable the AmbientAuthenticationInPrivateModesEnabled feature.

Also, In Microsoft Edge version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.

Policy options mapping:

RegularOnly (0) = Enable ambient authentication in regular sessions only

InPrivateAndRegular (1) = Enable ambient authentication in InPrivate and regular sessions

GuestAndRegular (2) = Enable ambient authentication in guest and regular sessions

All (3) = Enable ambient authentication in regular, InPrivate and guest sessions

Use the preceding information when configuring this policy.

For additional information refer this document: https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#ambientauthenticationinprivatemodesenabled

Let us know if you any further queries. Happy to assist you further.
Raymond Brooks 366 Reputation points

2025-04-01T19:31:19.66+00:00

Hi Harshitha Eligeti, i was unable to find AmbientAuthenticationInPrivateModesEnabled in the flags however they can be found in the GPO policy for Edge.
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-04-03T17:35:01.3266667+00:00

Hello @Raymond Brooks •
As you mentioned AmbientAuthenticationInPrivateModesEnabled was found in the GPO Policy for edge. You can set the policies as mentioned below:
If you set the policy to 'RegularOnly', it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions won't be allowed to ambiently authenticate.

If you set the policy to 'InPrivateAndRegular', it allows ambient authentication for InPrivate and Regular sessions. Guest sessions won't be allowed to ambiently authenticate.

If you set the policy to 'GuestAndRegular', it allows ambient authentication for Guest and Regular sessions. InPrivate sessions won't be allowed to ambiently authenticate.
If you set the policy to 'All', it allows ambient authentications for all sessions.
Let us know if you any further queries. Happy to assist you further.
Raymond Brooks 366 Reputation points

2025-04-04T13:59:09.4166667+00:00

Thanks Harishita
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2025-04-04T15:19:34.9633333+00:00

Hello @Raymond Brooks •
If the above discussion was helpful, please click "Accept Answer" and select "Yes" for "Was this answer helpful?". If you have any further questions, feel free to ask, as it may also benefit other community members reading this thread.

Share via

Single Sign On with Edge InPrivate Browser

0 additional answers

Your answer