Windows 1803 and above, ADFS and SSO not working anymore

[NatHall2014]

Hi,

 

We are part of a forest and cant you the magic of SSO, so we had to install and setup ADFS to allow office apps to automatically sign in when launched, this also works with OneDriveMapper very well.

 

Since testing 1803 and 1809 this seems to break the ability of Single Sign On, so for example if you launch Word or any other office app, the user is not showing their one drive or sites, you click on sign in, it then shows the users correct email address, click sign on and it just goes back to the sign on page.

 

Any ideas.

[chaplic]

there is no generic issue with 1803/9 and adfs sso. issue with zone assignment list in IE?

 

ignoring o365, this page should sso you in (change url obviously)

 

 

https://sts.contoso.com/adfs/ls/idpinitiatedsignon.htm

[Katy]

Not much help but we're on 1803 and have no issues with ADFS SSO (also in a complicated forest so can't use anything except ADFS), so doesn't look to be a general 1803 bug.

 

Edit: Think we're actually in the same forest, so has to be something to do with your domain (pretty sure I recognise your name from the network managers list!)

Will do some testing tomorrow, as I've had onedrivemapper fail recently but think it's just on users that have the internal domain UPN

Edited November 29, 2018 by Katy

[NatHall2014]

Thanks for your reply Katy,

 

We have had a similar issue with 3 users out of 400 as well, we also use OneDriveMapper and works very well indeed, all the Office apps and ie to office 365 also SSO, its very strange why 1607, LTSB 2015 and 2016 work floorlessly, nothing has changed with our configuration but still with version 1803 1809 single sign on we just cant get working properly, OneDriveMapper works just as well, but office apps do not sign in.

 

I'm guessing if the IE Zones were wrong the OneDriveMapper SSO would not work.

 

When you open Word or any office app, there is no SSO activity, click on file, open and no account shows, but as you can see the account is recognised and is shown in the top right of the app, when you click on Sign In it just goes back to this screen and thats as far as we can get.