(Managed Home Screen) Activate SSO on web clip

Question

Hello everyone, A customer has already sso enabled on a website on windows. I created Managed Home Screen launcher for android device and I created a web clip with the website's url where sso is activated. I haven't tested yet with the customer but do you think it will work or some configuration has to be done? Thank you in advance. Regards

Answer 1

@julien deroche,Thanks for posting in Q&A.

From your description, I know you want to know whether to test SSO on Android Managed Hoem Screen app because you have already configured SSO on Windows website.

For your problem, I have done some research, it showed that you need to configure your apps to use MSAL and shared device mode to participate in SSO. And we suggest that you do a test using a few users or devices first.

https://learn.microsoft.com/en-us/entra/identity-platform/msal-android-single-sign-on

Cause I am not familiar with SSO, and if you want to know more about SSO, it is suggested that you open an online case to get more help.

https://learn.microsoft.com/en-us/mem/get-support

Thanks for your kind understanding.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Thanks ZhoumingDuan-MSFT, Just another question, in my managed Home Screen I have outlook, powerpoint and teams. Only Outlook does sso and log out when I sign out. For Powerpoint and Teams to need to sign in. When I sign out and I sign in with another account it still the same account and I need to sign out manually in order to set up the sign in account. Do you know a way to resolve this ? I thought all microsoft apps had MSAL embedded by default.....

Thank you very much :)

Answer 3

Hi ZhoumingDuan-MSFT I found this https://techcommunity.microsoft.com/t5/intune-customer-success/endpoint-manager-supports-sign-out-for-apps-not-optimized-with/ba-p/3034398. However it supposed to work natively with teams but it doesn't. I need to reboot the device to make it work....