Azure AD SSO Prompt vs Microsoft AD SSO Prompt

Sean Rierson 1 Microsoft Employee

While trying to authenticate to VPN endpoints, users are presented with two different sign-in prompts. Can someone explain why a user would get one versus the other? Currently a user is getting the standard Microsoft AD SSO login prompt and not the Azure AD SSO login prompt and can't login as they need to use a non @microsoft.com account.

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,326 Reputation points

2022-05-11T04:18:49.503+00:00

Hello @Sean Rierson , what VPN solution are you using? Can you detail the setup?
Sean Rierson 1 Reputation point Microsoft Employee

2022-05-11T14:58:14.08+00:00

Using Palo Alto Global Protect. The issue is present for some users (not all) when they try to authenticate against another account (PME, AME, other) besides their @microsoft.com account. Some users will be presented with the "Pick an account" option, while others will get the standard authenticate with your standard @microsoft.com account. If the user tries to change that, the authentication fails.

The only thing that we have found to fix this, is to reformat the system they are using.

Some have suggested that myaccount.microsoft.com needs to be aware of a recent login with the non @micrsooft.com account. This has had some success, but users will eventually revert back to the standard and some users still have no luck with getting the "Pick an account" auth.

1 answer

Christian Brasolin 1 Reputation point

2022-05-26T15:54:57.403+00:00

Don't know why some PC work in this way, you have to give to those PC a second account to choose. Go in the account setting and under "email & account" add another account Exchance/o365 under "accounts used be email, calendar, and contacts", click cancel when ask for exchange email/password.
When the account is added, start GP and you should have the choice.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment