Forum Discussion

DavidBelanger's avatar
DavidBelanger
Icon for Microsoft rankMicrosoft
Nov 03, 2023

HOW TO: Hiding the consent prompt for Single Sign-On

We've been working on the ability to hide the dialog shown to users on first connection to a new session host when Single Sign-On is enabled to allow the remote desktop connection. The steps have now...
Florian_Paternostre's avatar
Florian_Paternostre
Copper Contributor
Dec 01, 2023

Sandeep Deo Thanks for the article. 
I tried to do it with Graph Explorer without success. 
I verified and assigned all required permissions (my account is global admin and I have consent all required permissions to Graph Explorer).
When doing the POST request to create the setting, I get the following error : 

Do I use the correct servicePrincipals ? 

I tried the following IDs :
  • Microsoft Remote Desktop (App ID a4a365df-50f1-4397-bc59-1a1564b8bb9c).
  • Windows Cloud Login (App ID 270efc09-cd0d-444b-a71f-39af4910ec45)
Andrew_Allston's avatar
Andrew_Allston
Iron Contributor
Dec 01, 2023
You need to look up those apps in your Directory and grab the object ID (SPN) for those app IDs and use those and NOT the app IDs themselves.

And since these exist already you need to use PATCH not POST to update the record. You will need to use POST for the next step when creating the group.

And remember you can always test with GET.

Resources