Forum Discussion

Anthony Russell's avatar
Anthony Russell
Iron Contributor
Jul 18, 2019

Still unable to sign in using AAD

The latest blog post suggests that you should be able to sign in using a AAD accounts, but i'm still not finding I can. Only MS accounts are able to be selected.   This is version 77.0.21...
RichLusk's avatar
RichLusk
Iron Contributor
Jul 26, 2019
In order to sync the Windows 10 settings of PC joined to Azure AD and the new Edge settings your Office 365 tenant must have an Azure Premium subscription in order to enable Enterprise State Roaming. I don't think most people know this. If you don't have an Azure Premium subscription when you go to Windows 10>Settings>Accounts>Sync your Settings you will notice the settings are grayed out and it says "Sync is not available for your account. Contact your system administrator to resolve this."
Here is an article with more information.
https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-overview
Notice about halfway through the article it states "Enterprise State Roaming is available to any organization with a Premium Azure Active Directory (Azure AD) subscription."
Jeffrey Allen's avatar
Jeffrey Allen
Silver Contributor
Aug 16, 2019

RichLusk, we have Azure AD Premium and it let's me sign in and says syncing but never does sync.

  • RichLusk's avatar
    RichLusk
    Iron Contributor
    Aug 21, 2019

    Syncing for work accounts does not work unless the O365 Tenant has Azure Premium P1 or P2. Edge Team please communicate this. Or please get with the O365 Azure Team and have them enable Enterprise State Roaming for all O365 plans and not just the Enterprise plans. Because right now unless a company has Office 365 Enterprise licenses there is no way to sync Windows 10 profiles nor the Edge profiles. Please see https://docs.microsoft.com/en-us/azure/active-directory/devices/enterprise-state-roaming-enable

    • SanderG's avatar
      SanderG
      Copper Contributor
      Aug 22, 2019

      RichLusk Thank you for this information.

      This is essentially different for how Chrome works in the enterprise. Chrome can be configured with a local sync backend (as opposed to a Google account that syncs with their servers).

      We have on-premises AD currently and use ADFS. My expectation was that Edge, with its automatic sign-in using federated credentials, would be superior to Chrome's solution for syncing data and we would happily uninstall Chrome. I hope this becomes possible in the near future.

    • Jeffrey Allen's avatar
      Jeffrey Allen
      Silver Contributor
      Aug 21, 2019

      RichLusk, thanks!  We have Enterprise State Roaming enabled as we have Azure AD Premium 2.  I have an M365 E5 license myself and have Enterprise State Roaming enabled for my account.  We don't have it on for all our users but for those users who we manage with Intune.

  • akhator's avatar
    akhator
    Former Employee
    Aug 19, 2019

    Jeffrey Allen Thanks for reporting the problem. Can you submit feedback using in-app feedback channel so that we can investigate this further? 

Resources