Configuring PRT for hybrid joined Azure AD SSO

Question

Hi All,

Im hoping someone can help me or at least give me some guidance on how to use/configure SSO with CloudAP using PRT.

I have looked online at Microsofts documentation, it explains what it is and what it does but i cant find anywhere how to set it up and configure. All i can find is troubleshooting it....but i need to set it up first!

I have hybrid joined Azure AD assets which are synced with Azure AD connect.

Running 'dsregcmd /status' on one of the assets i can see: -

Device state

AzureADJoined : YES

SSO

AzureAdPRT : NO

My question is, how do i get 'AzureAdPRT : YES' ?

Answer 1

@Lewis Neale

Apologies for the delay in answering this query. From the issue details i see you are not able to see the Primary refresh token ( PRT ) on the client devices.

You can refer to this article https://learn.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-hybrid-join-windows-current which talks about the detailed troubleshooting steps can be performed based on the output of dsregcmd /status command.

https://learn.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-device-dsregcmd

Let me know if you come across any issues following the above articles while troubleshooting the PRT issue on the device, will be happy to assist you offline.

Please remember to "Accept Answer" if answer/reply helped, so that others in the community facing similar issues can easily find the solution.