Forum Discussion
Fewer login prompts: The new “Keep me signed in” experience for Azure AD is in preview
A common request we get from our customers is to reduce the number of times users are prompted to sign into Azure AD. One way to reduce the frequency of prompts is to check the “Keep me signed in” ch...
Our data shows that having a bit of friction up front ultimately improves the long-term user experience as it reduces subsequent sign-in prompts.
Hi Kelvin,
We are experiencing an issue with the KMSI feature for IE11 only. We currently use ADFS 3.0 with Single Sign on. When users connect to services such as the office portal or SharePoint they are prompted to select there account, after which the service signs in. The issue is that the KMSI prompt is not presented to the users in the new experience. Within the old experience users were able to check the box to remain signed in.
What's strange is that from testing in other browsers such as Edge or Chrome we receive different results. In Edge users are redirected to the old sign-in experience where they can check the box. For Chrome, they again are taken to the old experience sign-in screen, but after entering there credentials they are redirected to the new KMSI prompt which can be selected and keeps the user signed in.
From our on-prem ADFS server we have enabled the KMSI feature, this has also been configured from the Azure Tenant level within the company branding section.
Any help would be greatly appreciated.
Cheers,
Tom
- You should no longer be seeing the old sign-in experience, so what you're seeing in Edge and Chrome is weird. What's the URL for when you see the old sign in experience in Chrome/Edge?
I am on W10 and do not get the KMSI prompt in the new sign in experience. Consequently, every time I have to Pick an account, after which it signs in with SSO. I tried to remove all internet explorer cache but I cannot get O365 to give me a KMSI prompt. What to do? I read somewhere something about a Windows Credential Manager, but I do not know what to do in there. Please help as this is annoying and costing extra seconds on each browser session.
- What kind of SSO do you have set up? Eg. Seamless SSO, Windows Integrated Auth etc.
