Gsuite SSO from Azure and subsequent chromebook login

[KK20]

GSuite education, Azure "free" sync'd with onsite AD plus ADFS. GSuite provisioned via Azure (users updating fine). So far I have NOT enabled GSPS on our domain controllers - that is to come.

 

So, I have followed both MS and google SSO via 3rd party. It works (of a fashion). Using a chromebook, I get three prompts to log in - the initial google prompt ([email protected]), this redirects to MS page with our usual ADFS background (the email address portion is blank so needs to be filled in again - there is no password box on this page, only a request for an email address), then a third simple popup credential box (which is also blank).

 

I obviously missed something or put an incorrect setting/URL as im sure you dont need to put your email address in three times (plus the password right at the end) to log onto a chromebook.

 

 

ideas?