SSO on Office/Azure portals in Chrome doesn't work (anymore)

[Kees Huizer]

We have a POC environment for Office 365 which has (amongst others) an ADFS 2016 environment, and we seem to have some issues with getting Chrome to do SSO to the Office portal etc.

SSO in Internet Explorer and Edge works fine, however when using Chrome we only get to the login page asking for our credentials instead of logging in automatically.

We configured ADFS to include Mozilla/5.0 as a WIASupportedUserAgents, and as far as i know, this was the only thing that needed to be configured for Chrome to do SSO, but somehow we can't get it to work. The weird thing is that i believe it worked fine about a month or so ago, but now (while not having made any configuration changes) it doesn't seem to work anymore.

Are we the only ones having this issue or??

[#2]

You may check this solution from MS Support regarding Third Party Browser issue: Office 365 single sign-on with third-party browsers

[#3]

Thanks,

However the 'Extended Protection' issue is something with older versions of Chrome.

(But to be sure we already tried and disabled the 'ExtendedProtectionTokenCheck' option in ADFS, but this didn't make a difference).

[#4]

Did you try to add Chrome in ADFS to support WIA?

You can use this command: Set-AdfsProperties -WIASupportedUserAgents ((Get-ADFSProperties | Select -ExpandProperty WIASupportedUserAgents) + “Chrome”)

[#5]

Yes, we already added Chrome to the list, this is the current list :

Get-ADFSProperties | Select -ExpandProperty WIASupportedUserAgents
MSIE 6.0
MSIE 7.0; Windows NT
MSIE 8.0
MSIE 9.0
MSIE 10.0; Windows NT 6
Windows NT 6.3; Trident/7.0
Windows NT 6.3; Win64; x64; Trident/7.0
Windows NT 6.3; WOW64; Trident/7.0
Windows NT 6.2; Trident/7.0
Windows NT 6.2; Win64; x64; Trident/7.0
Windows NT 6.2; WOW64; Trident/7.0
Windows NT 6.1; Trident/7.0
Windows NT 6.1; Win64; x64; Trident/7.0
Windows NT 6.1; WOW64; Trident/7.0
MSIPC
Windows Rights Management Client
Mozilla/5.0
Edge/12
Chrome

[#6]

We have the problem with the RS4 insider build where Edge/16 is used.