Seamless SSO for select users

[CHiLL]

We have previously had Seamless SSO enabled, allowing users to log into the PC and then not having to enter credentials to access Office 365. However, we ended up disabling it as we encountered a lot of students not knowing their school email addresses, as they didn't need to type it in. I'd like to know if it's possible to enable Seamless SSO just for a select group of users, say "All Staff" and leave everyone else without it. From what I'm seeing, it's still enabled the same way via Azure AD Sync as a global setting, but I can't find any mention of being able to target specific users/groups.

[Chuckster]

In Azure AD Connect you can tick the box next to each OU that you want syncing so that only select users have SSO whilst the rest are left alone.

[CHiLL]

In Azure AD Connect you can tick the box next to each OU that you want syncing so that only select users have SSO whilst the rest are left alone.

Thanks for your reply. We are currently have it set to password hash authentication for everyone. If change it to pass-through authentication and check the SSO box, it asks me to authenticate agaisnt our local AD but doesn't show anything to select specific OUs. If I check "Customize synchronization options", I can see the synchronized OUs but there's no option to select pass-through authentication.

[TechMonkey]

Is their email not just what they log into the PC with plus @DomAIN?

[CHiLL]

Is their email not just what they log into the PC with plus @DomAIN?

Yes, however the computer skills of our students is generally a lot lower than average due to the area we're based. Getting them to remember it's [email protected] has been a challenge for years, especially for remote learning.