Forum Discussion
SSO issues in Word and Excel, but not Outlook
I have similar issue. SSO is not working for Teams, Outlook, Edge and other apps.
In Event Log there is either error:
AADSTS9002341: User is required to permit SSO
or
Description: AADSTS70043: The refresh token has expired or is invalid due to sign-in frequency checks by conditional access.
But PRT is beeing issued, I've checked it via dsregcmd.
Hi,
Have you tried dropping the device off the domain and re-joining?
See details below.
A lot of people are currently experiencing a similar issue with SSO.
It might be due to the fact that Microsoft is after changing the Windows Single sign on experience. In order to be compliant with the Digital Markets Act (DMA) within the European Economic Area (EEA), Microsoft has started altering how Windows operates to align with global regulations like the DMA. One significant change involves the sign-in process for apps on Windows.
If you look at the sign-in logs for the users and see error code 9002341 or similar with the failure reason being "User is required to permit SSO", have a read through my blog post below.
https://www.welkasworld.com/post/tackling-mfa-fatigue-a-solution-for-sign-in-error-code-9002341-user-is-required-to-permit-sso
Hopefully this helps.Hi WelkasWorld
I came across your article when searching for my problem, but solution described didn't really help that day.Now when I use this link I don't see your post - it opens blank page, can you check it? I'd like to double check your solution.
Hey,
that's strange, the link works fine for me, maybe try and clear the cookies etc. in your browser?https://www.welkasworld.com/post/tackling-mfa-fatigue-a-solution-for-sign-in-error-code-9002341-user-is-required-to-permit-sso
If the link still doesn't work, try and go to the home page of the blog and the blog post is at the top of the page under featured posts: https://www.welkasworld.com/
