SSO with Azure AD not working on portal.office.com

[dsmith8]

Hi All,

 

We currently are setting up a new system running Azure AD and have been having some issues with SSO.

 

if we go to https://myapps.microsoft.com/ourdomain.org it sso's fine but when we go to portal.office.com or any .office.com domain it prompts for username once with give it that it picks up the password and signs in.

 

What are we missing?

 

We have SSO Enabled.

 

We have the the following in our intranet sites

 

 

• autologon.microsoftazuread-sso.com
  
• aadg.windows.net.nsatc.net
  

We have the following in trusted sites.

 

 

 

• *.sharepoint.com
  
  
• *.office.com
  
  
• *.microsoftonline.com
   
  
  

We also have the user authentication set to automatically use username and password under each zone setting.

 

Can anyone advice here as we are stumped?

 

Cheers

 

Dan

[willtech]

Try this:

 

https://login.microsoftonline.com/login.srf?wa=wsignin1%2E0&rver=6%2E1%2E6206%2E0&wreply=https%3A%2F%2Fportal.office.com%2F&whr=test.net

 

Replace test.net with your office 365 domain

[dsmith8]

Try this:

 

https://login.microsoftonline.com/login.srf?wa=wsignin1%2E0&rver=6%2E1%2E6206%2E0&wreply=https%3A%2F%2Fportal.office.com%2F&whr=test.net

 

Replace test.net with your office 365 domain

 

Thanks for the reply just tried this and it's doing the same as portal.office.com and asking for both user and pass. ;(

[Steve21]

Pretty sure what's as expected isn't it? Until you've SSO'd once you need to pass it your domain details via smart links

 

When you say about portal do you actually want portal (the site), or do you want it like with a list of apps/email etc?

 

In regards to willtech's one we got a slightly different link, (not using portal) but might work:

 

https://login.microsoftonline.com/login.srf?wa=wsignin1.0&whr=school.com&wreply=https://portal.office.com

 

Edit - Alternatively it could be that you don't have your UPN/links setup right from "user account" to "email" etc, does it work as real SSO on ANY page?

 

Steve

Edited June 13, 2020 by Steve21

[dsmith8]

Pretty sure what's as expected isn't it? Until you've SSO'd once you need to pass it your domain details via smart links

 

When you say about portal do you actually want portal (the site), or do you want it like with a list of apps/email etc?

 

In regards to willtech's one we got a slightly different link, (not using portal) but might work:

 

https://login.microsoftonline.com/login.srf?wa=wsignin1.0&whr=school.com&wreply=https://portal.office.com

 

Edit - Alternatively it could be that you don't have your UPN/links setup right from "user account" to "email" etc, does it work as real SSO on ANY page?

 

Steve

 

Hey thanks for your reply.

 

Your link does pick up our user and then signs them in when we click on their name.

 

I guess the question is should just plain old portal.office.com sso on it's own. We use cloud drive mapper and apparently for it to SSO it needs to just work by going to portal.

 

Hope that makes sense?

 

Dan

[willtech]

Sorry for the delay playing catchup.

 

Have you try this: https://portal.office.com/?domain_hint=test.net

 

Replace test.net with your office 365 domain

[dsmith8]

Just to let everyone know we have sorted it.

 

Turns out it was because our machines were domain joined but not Hybrid Azure AD Joined via Azure AD Join.

 

We found this by running dsregcmd /status in cmd, then we saw that AzureAdPrt under SSO was No.

 

So we went back through and ensured the devices were hybrid Azure AD joined and it now works with portal.office.com. Seems if it's just domain joined sso only works with apps.microsoft.

 

Thanks for everyones replies.

 

Dan