Microsoft Entra
A group of Microsoft multicloud identity and access solutions.
2,582 questions
Azure adds - sso office365
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 71%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERB%3C/text%3E%3C/svg%3E)
Rune Bakken
11
Reputation points
Hi,
I have an Azure adds Domain with AVD and Cloud only users (no onprem Domain exists). On first run on the AVD the users are prompted to sign in to OneDrive and office Application. How can I achieve full sso experience for the users on first run where the application automatically sign in to the office 365 applications?
Thx
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
25,073 questions
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT 35,616 Reputation points Microsoft Employee Moderator2022-11-22T16:01:26.17+00:00 @Rune Bakken Thank you for reaching out to us, just wanted to check if you have referred to this article https://learn.microsoft.com/en-us/azure/virtual-desktop/configure-single-sign-on which refers to configuring single sign-on for Azure Virtual Desktop using Azure AD Authentication.
-
Givary-MSFT 35,616 Reputation points Microsoft Employee Moderator
2022-11-30T06:07:33.063+00:00 Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
-
Jos van der Vaart 0 Reputation points2023-06-01T08:37:38.4166667+00:00 @Givary-MSFT We are running into the same problem. We have ADDS joined AVD machines where we would like to offer an SSO experience to OneDrive. The solution you offer in URL (https://learn.microsoft.com/en-us/azure/virtual-desktop/configure-single-sign-on) is described as not working for ADDS joined machines: "Azure Virtual Desktop does not support this solution with VMs joined to Azure AD Domain Services or Active Directory only joined session hosts." Do you have another solution for this?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 27%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGH%3C/text%3E%3C/svg%3E)
Guy Hines-Dedman 0 Reputation points2023-09-21T11:17:51.8866667+00:00 @Jos van der Vaart / @Rune Bakken - did either of you find a solution to this? I have the same issue.
https://learn.microsoft.com/en-us/fslogix/troubleshooting-known-issues#azure-ad-authentication-for-applications suggests there is a known issue with the auth tokens which would affect AD (+DS) joined session hosts, though there's no fix offered, besides the comment about Azure AD Broker Plugin. Not sure if there's a way to brute force the plugin to work. -
Jos van der Vaart 0 Reputation points
2023-09-21T11:43:52.01+00:00 @Guy Hines-Dedman Unfortunately, we have not yet found a concrete solution. We have resolved it with a workarround and are still investigating a solution. We are looking at not using ADDS anymore but an AD in an Azure VM in combination with Azure Cloud Sync.
-
Guy Hines-Dedman 0 Reputation points
2023-09-21T15:04:38.2433333+00:00 Thanks for coming back to me @Jos van der Vaart . We had a call with Microsoft to look at this earlier and my colleague said that after rebuilding FS Logix profiles is started working - OneDrive logins were persisting through new AVD Session logins. One snag however, other Microsoft 365 apps (Word, Outlook etc.) were not.. I would be interested to hear what you workaround was?
Sign in to comment
Sign in to answer