we have to log in to applications using SSO login.microsoftonline.com, Users have to enter their email addresses the first time of the day. Is there any setting cab be changed to login seamlessly(smoothly and continuously) without entering email every tim

Question

Hi team,

We have few applications which are integrated with Azure AD for SSO,

we have to log in to applications using SSO login.microsoftonline.com,

Users have to enter their email addresses the first time of the day. Is there any setting can be changed to login seamlessly(smoothly and continuously) without entering email every time.

Answer 1

Yes, you can enable seamless single sign-on (SSO) experiences for users by configuring Azure AD to remember their sign-in information across sessions. This can be achieved through various methods such as persistent cookies, session tokens, or device-based authentication. Here are some options you can explore:

Persistent Cookies: Configure Azure AD to issue persistent cookies to users upon successful authentication. Persistent cookies can be set to expire after a certain period, allowing users to remain signed in across sessions without having to re-enter their email addresses frequently.

Session Tokens: Utilize session tokens to maintain the user's authentication state across sessions. When users sign in initially, Azure AD issues a session token that can be used to authenticate subsequent requests without requiring the user to re-enter their credentials.

Device-based Authentication: Azure AD supports device-based authentication methods such as device registration and Azure AD Join. By associating authentication tokens with specific devices, users can seamlessly access applications without re-entering their email addresses, as long as they are using the registered device.

Conditional Access Policies: Implement conditional access policies in Azure AD to define rules for user authentication based on various factors such as location, device, or risk level. You can configure policies to allow seamless authentication for trusted devices or locations while enforcing additional authentication steps for higher-risk scenarios.

Remember Me Functionality: Some applications may offer a "Remember Me" or "Keep me signed in" option on the login page. Enabling this feature allows users to opt-in to persistent authentication, reducing the frequency of sign-in prompts.

It's essential to balance security and user experience when implementing seamless SSO. Consider factors such as the sensitivity of the applications and data accessed, regulatory requirements, and user preferences when configuring authentication settings in Azure AD. Additionally, ensure that users are educated about the implications of persistent authentication and have mechanisms to revoke access if needed.

If this helps you, please select my answer as 'Accepted Answer'.