Forum Discussion
Fewer login prompts: The new “Keep me signed in” experience for Azure AD is in preview
A common request we get from our customers is to reduce the number of times users are prompted to sign into Azure AD. One way to reduce the frequency of prompts is to check the “Keep me signed in” ch...
Unfortunately, there isn't a way to disable the shared device logic right now. The workaround is to use different browsers.
Kelvin, could you share any additional information about the shared device logic? I receive the additional keep me signed in prompt when using google chrome but it will not appear for me in IE, nor for any of my colleagues in the office.
Is there any particular setting that it could be picking up from IE?
Thanks
- Hi Jason,
Do you have any sort of SSO set up on your Windows machine? Eg. Browser SSO (where the account that is connected to Windows SSOs in the browser), or Seamless/Desktop SSO? If so, we won't show the prompt since SSO is happening.Hi Kelvin
We have ADFS and Single Sign On working through IE with the "Automatically logon only in Intranet zone" set.
Our users don't get the final option for Keep me signed in, which would be ok if only the first Pick an account window also did not show. This seems like a pointless prompt because if I select Use another account and then enter anything@ourdomain.com it will still sign in with the currently logged on user. So if this is the behaviour, why do we have the option to pick an account for SSO enabled browsers when it just appears to ignore it?
A better user experience for SSO-enabled browsers would be to not show the first prompt, and just log the user straight in. Alternatively - although less preferred - is to give them the prompt to allow them to stay logged in. Having the first prompt really defeats the purpose of SSO.
- Let me dig into this a bit more and get back to you.
