@Dustin Halvorson @Tiger Boshomane Hi guys, we apologize that this behavior persists. A number of people have added onto this thread about a number of different embed scenarios but my understanding is that your issues stem from being logged into a sharepoint page but not being able to automatically view your videos. This could happen for one of two reasons:
1) You're signed into sharepoint and federated through a system like ADFS that authenticates a user through an accelerated path that doesn't necessarily show that there's an active AAD session existing and as such Stream prompts a manual login because the login flow uses that as a fallback.
if this is the case let me know and we can walk you through how to use a domain hint (pointing to the endpoint you use to authenticate with) to respect the auto-acceleration flow and hopefully improve this behavior.
OR
2) your admin has set conditional access policies on certain resources at your company that require a condition like Multi-factor authentication. Since Stream utilizes MS Graph to pull the right data in to keep your permissions and videos up to date, we have to abide by that conditional access policy. SharePoint may have a separate policy that doesn't require the same authentication so you may be signed in at a lower level (maybe just user name and credentials) which is NOT enough for Stream. As such, Stream prompts you to "step-up" sign in with the correct level of authentication.
If this is the case, we are working with the Graph team to make improvements to this user experience and relieve as much of the user's friction as possible. There are some experiments in the works but this is a large systematic change that needs to be handled delicately in order to not potentially negatively impact any other scenarios. We also understand that the sign in prompt can be confusing and are working towards having a more meaningful message displayed.
if you have any more questions or are looking to stay in the loop with these changes more feel free to DM me directly OR you can send me an email (saraje@microsoft.com)
