Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,837 questions
SSO login issue with Azure AD
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 20%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Saurin Shah
0
Reputation points
We are having Azure AD (Entra ID) , we have multiple existing VM and while creating the VM , We have not enable login as entra ID join and once VM id created we have configured AZURE AD extension from extension to login with SSO username and password , when we have configured extension and see status , showing AzureADjoined : Yes , But AzureADPRT : NO , means having issue with SSO login even we have added user in RDP group and also no firewall block and all Ports are open and no connectivity issue , how to resolve this , we have existing all Windows server 2019 data center and also we have tried to create new VM and tried with same method still not able to login with SSO user we have tried with AzureAD\Username and also only domain username and pwd and when will enter its showing logon failed , conditional access is also enabled with MFA , but we have tried one without MFA user also please help to resolve
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAV%3C/text%3E%3C/svg%3E)
Akhilesh Vallamkonda 13,230 Reputation points Microsoft External Staff2025-03-05T21:22:30.8533333+00:00 Hi @Saurin Shah
May I know are you running dsregcmd as a user that has a hybrid identity, i.e., that's sync from AD to Entra ID?Could you please check the AzureAdPrtUpdateTime is more than four hours, there's likely an issue with refreshing the PRT. Lock and unlock the device to force the PRT refresh, and then check to see whether the time updates.
Use Event Viewer and Located under Application and Services Log > Microsoft > Windows > AAD and check if you find any events 1006& 1007 which as shown in the below
-
Akhilesh Vallamkonda 13,230 Reputation points Microsoft External Staff
2025-03-10T19:18:23.6266667+00:00 Hi @Saurin Shah
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help. -
Akhilesh Vallamkonda 13,230 Reputation points Microsoft External Staff
2025-03-12T18:52:22.36+00:00 @Saurin Shah
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sign in to comment
Sign in to answer