Azure AD Connect SSO - Chrome and Office 2016

[techie17]

Hi

 

I’ve setup Azure AD connect for Single Sign On and it auto logs in to Office 365 with IE fine and OneDrive also auto logs in fine but with Chrome and the Office 2016 Applications users have to enter their O365 user name to log in, with no password needed. Does any one know why it doesn’t seemlessly work with Chrome and Office 2016?

 

Thanks

[techie17]

Just checking the config of the Azure AD connect and i have Password Sync enabled rather than Passthrough authentication. Does this matter?

[Steve21]

Nope password hash works for both too

 

As long as you’ve added in the GPOs to setup trusted zones etc chrome should be working (The only thing that used to break it was if you have setup a custom gpo for chrome that override the authlist for Kerberos etc then you needed to readd the trustee zones into that policy as well). Any chance you might have done that for another product?

 

In regards to office that’s slightly different as you need to enable the modern authentication on your tenant and the GPOs within office to allow for SSO, just doing the trusted zones etc won’t enable it to work

 

For the tenant part if you run

 Get-OrganizationConfig | Format-Table -Auto Name,OAuth* 

what’s it return?

 

GPO wise will have to dig them out as not at site

 

Steve

[techie17]

Modern auth is definitely enable in Office 365 as it returns the result of True when the command is run. The GPOs are added asIE works fine so it’s just Chrome and Office when users have to enter the username. Just out of interest, what GPOs are needed for office 2016?