Forum Discussion
Office 365 Single Sign On
Currently in our tenant we have Federation option enabled. We can't turn on Seamless Single Sign on because our exchange team has some office equipment on premise and needs federation to be turned on.
We have frequent request from our user community that they get the login prompt and have to authenticate multiple times while using O365 services like Sharepoint, Teams etc.. We have sharepoint links from coldfusin intranet and other locations. Each time they click on any sharepoint document or link they have to authenticate which is a concern for users.
Is there anyway to avoid the login page for our users and help them sign in automatically while using O365 services like sharepoint and Onedrive without turning on seamless single sign on.
You only have to federate Office 365 by creating a trust with your local AD:
- EricStarker
Community Manager
I'm deleting the duplicate post. Sorry for the mix-up - thanks.
What you are looking for is the "seamless SSO" experience, which is certainly possible with AD FS but requires some additional configuration. First of all, make sure to review this article to better understand the expected experience: https://blogs.technet.microsoft.com/abizerh/2013/04/11/more-information-about-sso-experience-when-authenticating-via-adfs/
Once you cover that part, start working on the real solution for seamless SSO - smart links. I've put some guidance here: http://www.enowsoftware.com/solutions-engine/using-smart-links-to-improve-the-login-process-to-office-365-applications
For SPO in particular, you can also take a look at the "acceleration" feature: https://support.office.com/en-us/article/enable-or-disable-auto-acceleration-for-your-sharepoint-online-tenancy-74985ebf-39e1-4c59-a74a-dcdfd678ef83?ui=en-US&rs=en-US&ad=US
but why get into more complex configurations when they have it almost there with AADConnect and ADFS?
