Office 365 Single Sign On

Currently in our tenant we have Federation option enabled. We can't turn on Seamless Single Sign on because our exchange team has some office equipment on premise and needs federation to be turned on...

Azure Active Directory (AAD)

microsoft 365

VasilMichev

MVP

What you are looking for is the "seamless SSO" experience, which is certainly possible with AD FS but requires some additional configuration. First of all, make sure to review this article to better understand the expected experience: https://blogs.technet.microsoft.com/abizerh/2013/04/11/more-information-about-sso-experience-when-authenticating-via-adfs/

Once you cover that part, start working on the real solution for seamless SSO - smart links. I've put some guidance here: http://www.enowsoftware.com/solutions-engine/using-smart-links-to-improve-the-login-process-to-office-365-applications

For SPO in particular, you can also take a look at the "acceleration" feature: https://support.office.com/en-us/article/enable-or-disable-auto-acceleration-for-your-sharepoint-online-tenancy-74985ebf-39e1-4c59-a74a-dcdfd678ef83?ui=en-US&rs=en-US&ad=US

Pablo R. Ortiz

Steel Contributor

Feb 28, 2018

but why get into more complex configurations when they have it almost there with AADConnect and ADFS?

https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectfed-whatis

https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-user-signin#federation-that-uses-a-new-or-existing-farm-with-ad-fs-in-windows-server-2012-r2

Forum Discussion

Office 365 Single Sign On

Share

Resources