Forum Discussion
SSO to O365
Hi all,
In our environment we configured mail=UPN and we are using UPN as a user logon to Azure/O365. Is it possible to configure Windows workstation to connect to Office 365 sites using IE with pa...
Hi Christopher,
It's also an option, but depends the requirements. Some customers will always use ADFS because of privacy of passwords and access services.
In that case you can use the Azure AD Sync option with Password pass through as well.
PTA can work with AlternateId (using any attribute other than UPN), and so does AAD Connect SSO, so AD FS is not mandatory unless you have some very specific requirements. Now, if you need true "seamless" SSO, in all cases you will also have to configure some form of smart links, for any/all applications that do not send domain_hint information as part of the auth flow. Otherwise you will still have to enter the UPN (mail) of the user before SSO happens.
