Forum Discussion
WVD Azure AD DS Office 365 auto login
MicrosoftPerisak1630 : Unfortunately, the quick answer is no. You can get that "auto-signed in" functionality from a Windows machine (physical or virtual) to Office when you have Azure AD Seamless Sign-On enabled. However, you can only do this if you have a managed domain (Active Directory with Azure AD Connect) or a federated domain (Active Directory with ADFS). This does not work and is not supported when using Azure AD DS.
I'd also be interested to learn more about how to get this working. We have an in-progress deployment for a customer and we're unable to get the Office Apps, Chromium Edge or OneDrive to automatically sign in on the Windows 10 WVD session hosts.
The customer has Azure AD Connect without ADFS, and we've followed all the documentation steps to configure SSO. The session hosts are showing as Hybrid Azure AD Joined in the azure portal and I'm quite sure we have on premises devices working correctly before hand (unable to test right now).
Ben White Are you using Conditional Access, and requiring MFA for all users? If so this could be your issue. I found that removing the requirements for MFA allowed single sign-on to function. What I actually did here was to add Azure Firewall to the VNET where the host pool nodes are deployed, and routed all traffic through that. I then Added a trusted location in CA for the public IP of the Azure Firewall, and created a new policy to require Hybrid Joined computers as an access condition in CA.
HTH
shaunlaughton is it possible to provide more detail on your firewall setup on this? I am interested in replicating your setup and testing, as we are still struggling with this issue both on WVD and Citrix
