How to stop Edge browser on asking MFA (Yubikey) for Seamless SSO

Question

Please i need your help on this.

We are looking into enabling Seamless SSO in Entra ID. We have active directory onprem syncing to Entra ID. The devices are registered only as we still didn't implement Intunes. I made the necessary required configuration but still each time I login through my work device and go to the browser to sign in to Microsoft 365, i am still being prompted to enter the password of my yubikey.

Can you help in letting me know how to pass the yubikey when i login to windows using my yubikey inside the company?

NB: we don't use a fixed public IP on prem.

Answer 1

Hi @Joseph Moufareg Abou Jawdeh

Try to create an additional access or edit the existing one which manage MFA authentication to exclude the network range of your company:

Create a Conditional Access policy

---

Please don't forget to accept helpful answer

---

Answer 2

Hi @Joseph Moufareg Abou Jawdeh
Thank you for posting your query on Microsoft Q&A.

I understand that you are trying to stop Edge browser on asking MFA (YubiKey) for Seamless SSO.

Follow the below steps to revoke the YubiKey as an authentication method from a Microsoft account:

Step 1: Go to your Microsoft account profile configuration page: https://aka.ms/mfasetup

Step 2: In the list of sign-in methods, identify the YubiKey you would like to remove from your account and then click on the “delete” link (in the case you have multiple YubiKeys associated to your account)

Step 3: In the pop-up message, confirm the deletion

Step 4: Confirm that the YubiKey you deleted is no longer in the list

Hope this helps. Do let us know if you have any further queries.

Thanks,

B. Siri Chandana.