Forum Discussion
Seamless SSO - IE - Enhanced Protected mode
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-sso trying to keep IE locked down but still allow seamless sso for my on-premise users. There are a few different GP...
currently the minimum working configuration for this is:
IE Advanced Tab: Enable 64 bit processes for Enhanced Protected Mode: Enabled Enable Enhanced Protected Mode: Disabled Internet Zone: Enable Protected Mode: Enabled Intranet Zone: Enable Protected Mode: Disabled
opened a support case to see if there are other work arounds or options to provide users sso who are on the domain.
if they suggest hybrid join i will need to ask about support for VDI environments.
https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan