Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,465 questions
SSO Not Working
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 76%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Jon Mercer
971
Reputation points
I have found a couple questions about this, but not really an answer. I am trying to get SSO working. We had a pre-2017 setup of AAD, but I enabled modern authentication already.
We setup AAD Connect with HASH.
I have gone through the troubleshooting steps here https://learn.microsoft.com/.../hybrid/tshoot-connect-sso... and one thing I am not sure of is where it says to look for the AZUREADSSOACC entry when running klist. I don't see that mentioned, just the local @*.com entries.
I have verified in AAD SSO is on, purged the Kerberos tickets, removed and re-added the SSO service in AAD Connect, verified the site entry https://autologon.microsoftazuread-sso.com and Allow updates to status bar via script where pushed by GP by looking in Internet Options in Control Panel. If I try to though go to say outlook.office365.com or such in private mode in Edge Chromium, it asks for the password still.
The only thing I wonder about is that the SSO in AAD says the server is *.local, not *.net that is our URL. Someone else on here a while back mentioned this, but looks like that wasn't the issue, but they never actually replied if what they had found about and extension (Chrome) resolved the issue, so not sure if that could be causing an issue?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee2021-10-18T22:50:11.81+00:00 Just to confirm, are you able to login with UPN and password?
-
Jon Mercer 971 Reputation points
2021-10-18T22:58:04.767+00:00 Yes, that works fine. It is just when I put in the email address when going to say outlook.office365.com in private (Edge Chromium) it still asks for the password.
Sign in to comment