tech-man Posted October 22, 2020 Posted October 22, 2020 Hello, Firstly, I am not 100% sure of the expected behavior... but... Is it possible to make Office 2019 (Word/Excel etc) automatically sign in to OneDrive, so when the user opens Word it is automatically signed in and they can access their files online? If so, what settings do I need to configure? I have SSO configured & working. It's starting to drive me crackers. Thanks
Mako Posted October 22, 2020 Posted October 22, 2020 I tried deploying the 2016 and 2019 versions of Office but couldn't get that aspect of it to work. Had to deploy Office 365 instead, works like a charm, everyone is automatically logged into OD/SP when they fire up an Office app due to the SSO and way it licenses it.
tech-man Posted October 22, 2020 Author Posted October 22, 2020 Thanks for this. Where do I download this from? How is it licensed etc?
Mako Posted October 22, 2020 Posted October 22, 2020 Unless someone can jump in with how they got it working with the "full" versions, there's a bit of reading involved, and also depends how you deploy stuff in your environment (SCCM, MDT etc). Office Deployment Tool (ODT) is a good starting point, or to go very much "from the top", the 365 planning info page is a good place to start. I use MDT coupled with WDS, and the Office install is part of the MDT deployment. Choosing to install Office sets it off based on the configuration of the ODT. You deploy it with Shared Computer Licensing, so when a user opens Word and signs into their account (via SSO), it checks their O365 license entitlement online. As long as they have validity, they can use all the features and it doesn't count towards their total device limit.
chazzy2501 Posted October 22, 2020 Posted October 22, 2020 (edited) This may sound strange but I've deliberately not done this kind of integration. This allows the office experience here at school to be the same as at home. Here we can train and reinforce the workflow that they should get used to. I do not even have a shortcut to office.com. EDIT: I also find that more pupils are using the online version of word with the new edge browser than the local one. So I may move away from a locally installed office in the future. Edited October 22, 2020 by chazzy2501
tech-man Posted October 22, 2020 Author Posted October 22, 2020 OK, so I have upgraded a machine to 365 Apps. When a user logs in and opens Word it prompts them to "Sign in to set up Office". How can I automate this bit and automatically sign them in?
Mako Posted October 22, 2020 Posted October 22, 2020 Impressive turnaround. Make sure you set this in your xml config So that it won't start bodging their licenses. You mentioned you had SSO configured and working, it should pick it up automatically as long as shared licensing is in effect. I vaguely remember that you had to use the 64-bit version, but that could be a nightmare I once had...
tech-man Posted October 22, 2020 Author Posted October 22, 2020 Yep - i've set that value in the config and via GPO. I've installed the 32 bit version.... surely 64bit wont make a difference?!?! This is rather frustrating!!
Mako Posted October 22, 2020 Posted October 22, 2020 (edited) I've installed the 32 bit version.... surely 64bit wont make a difference?!?! I don't want to say "yes" because I can't be certain, but I remember banging my head against the wall in 2018 getting it to all work seamlessly. There must be a reason that in my mind that says "you must use 64-bit". Ninja edit: I'd try 64 bit just to be sure. You're future-proofing yourself there as well, as I imagine at some point 32 bit will cease to exist. How is your SSO configured? ADFS? AD Connect? Actually signing into the prompt may help with the troubleshooting - if it says you're not licensed for the product then it's a licensing issue (or your desktops can't communicate with the online authentication service), if it asks about adding the device to the company and/or registering it then it's a shared activation issue. Edited October 22, 2020 by Mako
meakjoe Posted October 22, 2020 Posted October 22, 2020 We have it working with Office 2019 perfectly at our site. Reasoning we went for 2019 over 365 is that users with MFA had to manually sign in to use the 365 version, whereas we could activate 2019 with a key so that they could at least open the program with no prompts, and then sign into OneDrive and approve the MFA challenge if they wanted to use that. We have SSO configured with AD Connect so it signs them in automatically on browsers, as well as Teams/Office etc.
tech-man Posted October 22, 2020 Author Posted October 22, 2020 Wonder what I am doing wrong - if the user goes to https://myapps.microsoft.com/DOMAIN.onmicrosoft.com it logs then straight in. Teams does not automatically sign them in either. They are presented with their email address in the sign-in screen.
5tu Posted October 22, 2020 Posted October 22, 2020 Have you done step 3 in this guide? https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start
tech-man Posted October 23, 2020 Author Posted October 23, 2020 Have you done step 3 in this guide? https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start Yer, because it works if I visit the “test” pages mentioned. Something that should be simple is so frustrating!!
tech-man Posted October 25, 2020 Author Posted October 25, 2020 Does anyone else have any ideas on this? Even OneDrive app won’t sign in automatically - I’ve the GPO set for it to.
FragglePete Posted October 26, 2020 Posted October 26, 2020 From what I can remember, once you've got SSO setup with Azure AD Connect (with pass through authentication) is ensuring you have the various Microsoft sites set as trusted sites on your domain - this will then facilitate all the various apps, etc to sign on Seamlessly (SSSO). Pete
tech-man Posted October 26, 2020 Author Posted October 26, 2020 From what I can remember, once you've got SSO setup with Azure AD Connect (with pass through authentication) is ensuring you have the various Microsoft sites set as trusted sites on your domain - this will then facilitate all the various apps, etc to sign on Seamlessly (SSSO). Pete Done this. Works via Edge or IE but the Apps don’t work
FragglePete Posted October 26, 2020 Posted October 26, 2020 Done this. Works via Edge or IE but the Apps don’t work May just be an Office GPO that needs to be set. Sorry, working from memory and it's one of those things you only setup once and forget about it! Sounds like your close. Pete
Steve21 Posted October 26, 2020 Posted October 26, 2020 Have you checked modern auth is enabled on your tenant with Powershell etc? Pre/2017 ones are disabled by default Steve
tech-man Posted October 27, 2020 Author Posted October 27, 2020 Have you checked modern auth is enabled on your tenant with Powershell etc? Pre/2017 ones are disabled by default Steve Yes it is
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now