Outlook 2016 - Promping for windows credentials and O365 license reg. even with SSO.

%3CLINGO-SUB%20id%3D%22lingo-sub-269319%22%20slang%3D%22en-US%22%3EOutlook%202016%20-%20Promping%20for%20windows%20credentials%20and%20O365%20license%20reg.%20even%20with%20SSO.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-269319%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHello%2C%26nbsp%3B%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%3EWhen%20we%20start%20Outlook%202016%20-%20Office%20365%20for%20the%20first%20time%2C%20it's%20prompting%20for%20Windows%20credentials%20and%20after%20that%20it%20promts%20for%20Office%20365%20login%20to%20register%20the%20Office%20license.%26nbsp%3B%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%3EBUT%2C%20we%20just%20implemented%20Azure%20AD%20Password%20hash%20sync%20with%20seamless%20SSO%2C%20which%20works%20as%20it%20should%20in%20browsers%20etc.%26nbsp%3B%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3EBut%20why%20are%20we%20still%20getting%20prompted%20for%20Windows%20credentials%20and%20Office%20365%20licens%20credentials%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-269319%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-269675%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%202016%20-%20Promping%20for%20windows%20credentials%20and%20O365%20license%20reg.%20even%20with%20SSO.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-269675%22%20slang%3D%22en-US%22%3E%3CP%3EThen%20maybe%20you%20have%20to%20do%20Hybrid%20Modern%20Authentication%20for%20Exchange%20On-Premises%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fexchange%2F2017%2F12%2F06%2Fannouncing-hybrid-modern-authentication-for-exchange-on-premises%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fexchange%2F2017%2F12%2F06%2Fannouncing-hybrid-modern-authentication-for-exchange-on-premises%2F%3C%2FA%3E%3C%2FP%3E%3CP%3EThere%20is%20a%20list%20of%20requirements%20for%20it.%20Haven't%20done%20this%20myself%2C%20we%20use%20Exchange%20Online.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-269570%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%202016%20-%20Promping%20for%20windows%20credentials%20and%20O365%20license%20reg.%20even%20with%20SSO.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-269570%22%20slang%3D%22en-US%22%3EThanks%20for%20your%20input.%3CBR%20%2F%3ESorry%20I%20missed%20the%20info%2C%20we're%20running%20latest%20version%20of%20Exchange%202016%2C%20not%20Exchange%20Online%20yet.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-269569%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%202016%20-%20Promping%20for%20windows%20credentials%20and%20O365%20license%20reg.%20even%20with%20SSO.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-269569%22%20slang%3D%22en-US%22%3EHello%2C%3CBR%20%2F%3E%3CBR%20%2F%3EWe're%20running%20latest%20Office%202016%20O365%3CBR%20%2F%3E%3CBR%20%2F%3E16.0.10927.20001%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-269543%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%202016%20-%20Promping%20for%20windows%20credentials%20and%20O365%20license%20reg.%20even%20with%20SSO.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-269543%22%20slang%3D%22en-US%22%3E%3CP%3EAlso%2C%20by%20implementing%20SSO%20do%20you%20mean%20only%20enabling%20this%20setting%20in%20AD%20Connect%20(and%20probably%20adding%20URLs%20to%20intranet)%3F%20If%20your%20tenant%20is%20older%20than%202017.08.01%2C%20you%20also%20have%20to%20enable%20Modern%20authentication%20for%20Exchange%20Online%20(and%20also%20for%20Skype%20for%20Business%20as%20it%20is%20recommended%20to%20enable%20both)%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fenable-or-disable-modern-authentication-in-exchange-online-58018196-f918-49cd-8238-56f57f38d662%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fenable-or-disable-modern-authentication-in-exchange-online-58018196-f918-49cd-8238-56f57f38d662%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-269475%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%202016%20-%20Promping%20for%20windows%20credentials%20and%20O365%20license%20reg.%20even%20with%20SSO.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-269475%22%20slang%3D%22en-US%22%3E%3CP%3EWhich%20build%20of%20Office%20is%20that%3F%20Only%20versions%2016.0.8730.xxxx%20and%20above%20support%20seamless%20SSO%20experience.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-269411%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%202016%20-%20Promping%20for%20windows%20credentials%20and%20O365%20license%20reg.%20even%20with%20SSO.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-269411%22%20slang%3D%22en-US%22%3EIs%20the%20users%20UPN%20matching%20the%20email%20address%3F%20How%20does%20the%20users%20type%20their%20username%20login%20into%20windows%3F%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hello, 

When we start Outlook 2016 - Office 365 for the first time, it's prompting for Windows credentials and after that it promts for Office 365 login to register the Office license. 

BUT, we just implemented Azure AD Password hash sync with seamless SSO, which works as it should in browsers etc. 
But why are we still getting prompted for Windows credentials and Office 365 licens credentials? 

6 Replies
Highlighted
Is the users UPN matching the email address? How does the users type their username login into windows?

Adam
Highlighted

Which build of Office is that? Only versions 16.0.8730.xxxx and above support seamless SSO experience.

Highlighted

Also, by implementing SSO do you mean only enabling this setting in AD Connect (and probably adding URLs to intranet)? If your tenant is older than 2017.08.01, you also have to enable Modern authentication for Exchange Online (and also for Skype for Business as it is recommended to enable both):

https://support.office.com/en-us/article/enable-or-disable-modern-authentication-in-exchange-online-...

https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-y...

Highlighted
Hello,

We're running latest Office 2016 O365

16.0.10927.20001
Highlighted
Thanks for your input.
Sorry I missed the info, we're running latest version of Exchange 2016, not Exchange Online yet.
Highlighted

Then maybe you have to do Hybrid Modern Authentication for Exchange On-Premises https://blogs.technet.microsoft.com/exchange/2017/12/06/announcing-hybrid-modern-authentication-for-...

There is a list of requirements for it. Haven't done this myself, we use Exchange Online.