[ms office - 2016] SSO

[chris11256]

HI,

 

How can I get Office 2016 SSO working, so that for example when a user opens Word it's automatically logged in and they have instant OneDrive access. Or they open Outlook and don't have to do that initial config screen. we use Azure AD connect with password hash and SSO enabled for Office 365 web access. Also have Hybrid domain join setup in Azure so that domain Windows 10 pc's automatically join Azure AD.

 

Thanks in advance!

[Uber22]

Hey

Chris, I am looking to deploy the same thing witch guide did you follow for the azure setup.

 

Thanks

 

Rob

[themightymrp]

I second that, this is what I’m looking at over the next year if possible. I don’t think ADFS is where I need to be looking these days although I have set it up for o365 before at my last school. A simple guide for azure ad connect stuff would be great.

 

Also, can this be done with office 2016? Or do you need to run office click to run edition?

[psumner1992]

We have found Office 2019 and Office365 have the best experience with SSO and OneDrive etc.

 

If you have AADConnect setup with SSO for your users/devices then there should be very little else required.

 

Over the Summer I am going to be supporting one of our local secondary schools through this process as we have already completed this successfully and started moving users to OneDrive for their storage earlier this year.

 

I’ll take some notes to share, hopefully they’ll help others get through the process.

[chris11256]

Hey,

 

So far I've just followed the MS Guide for Hybrid domain join https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains. SSO has also been enabled in AD Connect & Azure.

 

I know it's possible with Office 2016, as we had it working at my last school(not setup by me). Although ADFS was used rather than AD Connect. So I'm at the point where SSO works for Office 365 Via IE(despite MS guidance saying it should work in Chrome, it doesn't) I just want to extend it to office so users have instant access to their OneDrive.

[psumner1992]

Try the section in this guide linked to enabling modern authentication.

 

https://docs.microsoft.com/en-gb/azure/active-directory/hybrid/how-to-connect-sso-quick-start

[chris11256]

Have done that this morning. I'm now at the point where Office apps will only auto sign in if the users opens Outlook first. Otherwise word(for example) opens without the user being signed in.

[chris11256]

Just to update my own thread. I'd read somewhere that it wasn't working because I'm using the volume copy downloaded through vlsc.

 

As I'd imaged all computers with Windows 10 anyway and no one has used them yet, I've started the move to Office 365 with Shared Computer Activation. On the handful of computers I tested today, it works perfectly and users then have Onedrive access instantly.