AzureAD PTA SSO-Chrome

Mahesh Aralelemath 386

Hi,

We have enabled Azure AD PTA SSO but its not working in Chrome browser.
IE and Edge browser is working fine but Seamless SSO is not working Chrome browser.

We have mix of client environment with Windows 10, Windows 2016 HSD(Terminal Services) and Windows 7 VDI.

Any recommendation will be really helpful.

Regards
Mahesh

1 answer

Abhijeet-MSFT 546 Reputation points Microsoft Employee

2021-01-26T15:16:37.75+00:00

Hi @Mahesh Aralelemath , have you installed Windows 10 accounts extension to Chrome? Please try adding that and test again. Also make sure that you are not testing in incognito mode. Refer https://chrome.google.com/webstore/detail/windows-10-accounts/ppnbnpeolgkicgegkbkbjmhlideopiji?hl=en for extension details.
Please sign in to rate this answer.

1 person found this answer helpful.
Mahesh Aralelemath 386 Reputation points

2021-01-26T15:28:57.813+00:00

Hi Abhijit,
I am reading "Windows 10 accounts extension to Chrome" are specifically for Windows 10, does it work for Windows 7 and Windows 2016 (HSD/Terminal Services) ? I don't see any such documentation around it.

Regards
Mahesh

Abhijeet-MSFT 546 Reputation points Microsoft Employee

2021-01-26T15:51:12.42+00:00

@Mahesh Aralelemath , Windows 10 & windows 2016 are same platforms so Windows 10 extension will work. For windows 7, you need to have workplacejoin msi installed. Refer: https://www.microsoft.com/en-us/download/details.aspx?id=53554

Mahesh Aralelemath 386 Reputation points

2021-01-26T17:07:28.41+00:00

Thanks Abhijeet, will check this for Windows 7

Regards
Mahesh

Mahesh Aralelemath 386 Reputation points

2021-02-04T18:08:17.163+00:00

Hi Abhijeet,

Tested this for Windows 7 MSI.....this looks to be mainly for registering Windows 7 in Azure AD.
Is this mandatory to achieve SSO?

My understanding is Azure AD Pass Through Authentication - Seamless Sign On is capable of providing seamless SSO for on-prem AD login as well and doesn't required to be Hybrid joined or Azure AD Joined.

Kindly suggest if we have any alternate to check for Windows 2016 HSD and Windows 7 onprem devices which are logging in to on-prem AD.

Note: UPN in Azure AD is mapped to email address attribute in on-prem AD. UPN in on-prem is different than the verified Domain or non routable UPN.

Regards
Mahesh.

Abhijeet-MSFT 546 Reputation points Microsoft Employee

2021-02-05T14:51:21.27+00:00

Hi @Mahesh Aralelemath , the sign in attribute does not matter here because PTA determines user by security ID. If this is not working on Chrome, can you check this https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start#microsoft-edge-based-on-chromium-all-platforms
Also, ensure that the Azure AD URL (https://autologon.microsoftazuread-sso.com) is part of the user's Intranet zone settings. If this still does not work, list the existing Kerberos tickets on the device by using the klist command from a command prompt. Ensure that the tickets issued for the AZUREADSSOACC computer account are present.
Sign in to comment

Share via

AzureAD PTA SSO-Chrome

1 answer