Forum Discussion
Single Sign On to Teams
ah could I use conditional access to allow easy access in our network and MFA for outside it?
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/untrusted-networks
- They aren’t part of Office 365 it was a volume license and works from a KMS
This thread may also prove useful to you. Looks like you are not alone in this, and this is perhaps expected behaviour at the moment.
Oh, one other question - is modern authentication enabled on your tenant? Specifically for Skype for Business (which relates to Teams)?
OK, so if SSSO works with those other Office Applications with MFA enabled, I would also expect it to work the same way with the Teams application. However, this is not the experience you are seeing, which brings us full circle to your original problem.
I have no other immediate suggestions for you i'm afraid, but I will think some more about this and if I find out anything further, I will let you know.
- Yes that’s right, we bough a volume license for office standard in 2016.
Office 2016 is enough for what we need OK, let me ask another question then if I may. With E1, you don't get the full fat client Office applications. Do you have Office apps through other means on your users machines? And if so, does SSSO work OK for this apps?
It is the E1 subscription
Does SSO not work when MFA is enabled, or is there something wrong with our setup?
Is the only way to make it work how we want through conditional access?
What subscription do you have for your users at the moment? Could be worth looking at Microsoft 365 Business Premium which includes Azure AD Premium P1 - https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/azure-active-directory-premium-p1-is-coming-to-microsoft-365/ba-p/1275496
I realized at the same time as your post!
I cant win at the minute!
im just trying to make it easy for users, so when they are logged on to the network, they dont need to also log onto Teams
