Expected login experience with ADFS

With ADFS set up I expected that the user experience would be: 1. Open browser 2. Click link to Office 365 app (SharePoint, Planner, etc..) 3. App opens (user is authenticated) Recently I w...

office 365

sharepoint

Steven Collier

MVP

Nov 21, 2016

What's displaying the links in step 2 ?

In general when you visit Office 365 it needs to ask you who you are in order to send you to your adfs service, if your adfs does an integrated login then it'll not prompt you but log you in. There are ways to avoid this step where you first need to tell Office 365 who you are :-

1. Go to mail at https://outlook.office.com/owa/?realm=yourtenantdomain

2. Access a SharePoint site with acceleration enabled as per https://support.office.com/en-gb/article/Enable-auto-acceleration-for-your-SharePoint-Online-tenancy-74985ebf-39e1-4c59-a74a-dcdfd678ef83?ui=en-US&rs=en-GB&ad=GB

3. Build idP smartlinks as per https://blogs.msdn.microsoft.com/jvasil/2014/05/08/o365-limiting-authentication-prompts/

We have SharePoint as our homepage, users very rarely get prompted.

Eric Adler

Iron Contributor

Nov 21, 2016

This is great!!

What we're seeing is the need to click on your user name and/or enter email address before it redirects to the ADFS. This seems to align with your description.

Thank you!

VasilMichev
MVP
Nov 22, 2016
Just to add that you can get the persistent cookie by adding &LoginOptions=1 at the end of the smart link, if you decide to go that route.

Forum Discussion

Expected login experience with ADFS

Resources