OneDrive single sign-on

[jmak]

I'm trying to get a seamless setup process and in a previous environment I had the group policy working to get OneDrive signed in and synchronising without user intervention.

 

Pretty sure I know the answer to this, but thought I'd ask anyway: if you have MFA enabled on the Microsoft account, is there any seamless way of doing it? Could you pass the MFA token from other office applications?

 

Assuming not, what workflow do you have for first run scenario?

[TechMonkey]

I'm not an expert, but I thought that if you had a successful sign in with MFA the SSO just went ahead. The user has the token, and the token is authorised.

[jmak]

I thought so too, but in our environment it seems that you're promoted for MFA on first run for Office (only once for all applications), again for Outlook, again for each additional Outlook shared mailbox and again for OneDrive.

[FN-GM]

I thought so too, but in our environment it seems that you're promoted for MFA on first run for Office (only once for all applications), again for Outlook, again for each additional Outlook shared mailbox and again for OneDrive.

 

This isn't normal behaviour. It should ask once and that's it.

 

Do you use conditional access? This could cause this.

[jmak]

I'll check. I recently started working in a fairly large organisation and the M365 tenancy is managed by a separate team - we just get delegated rights and can submit change requests.

 

It's a bit of a culture shock coming from a school where I was *the* domain admin, *the* global admin, *the* network admin etc...

 

Much better in lots of ways - definitely outweighs the negatives, but makes this kind of thing much slower to resolve.

[garethEds]

You should try working in Wales!