Forum Discussion

EricStarker's avatar
EricStarker
Former Employee
Sep 19, 2017

Fewer login prompts: The new “Keep me signed in” experience for Azure AD is in preview

A common request we get from our customers is to reduce the number of times users are prompted to sign into Azure AD. One way to reduce the frequency of prompts is to check the “Keep me signed in” ch...
Azure Active Directory (AAD)
Kelvin Xia's avatar
Kelvin Xia
Icon for Microsoft rankMicrosoft
Dec 06, 2017
Hi Jason,

Do you have any sort of SSO set up on your Windows machine? Eg. Browser SSO (where the account that is connected to Windows SSOs in the browser), or Seamless/Desktop SSO? If so, we won't show the prompt since SSO is happening.
Pete Bostrom's avatar
Pete Bostrom
Brass Contributor
Feb 21, 2018

Hi Kelvin

 

We have ADFS and Single Sign On working through IE with the "Automatically logon only in Intranet zone" set.  

 

Our users don't get the final option for Keep me signed in, which would be ok if only the first Pick an account window also did not show.  This seems like a pointless prompt because if I select Use another account and then enter anything@ourdomain.com it will still sign in with the currently logged on user. So if this is the behaviour, why do we have the option to pick an account for SSO enabled browsers when it just appears to ignore it?

 

A better user experience for SSO-enabled browsers would be to not show the first prompt, and just log the user straight in.  Alternatively - although less preferred - is to give them the prompt to allow them to stay logged in.  Having the first prompt really defeats the purpose of SSO.

 

  • Kelvin Xia's avatar
    Kelvin Xia
    Icon for Microsoft rankMicrosoft
    Feb 21, 2018
    Let me dig into this a bit more and get back to you.

Resources