SSO with your work or school account

[hbs-dcg]

Hi Everyone,

 

I have just enabled Entra hybrid join for school devices.

 

I am trying to get the users Azure AD account to auto sign in to the work and school account to enable Edge sync and OneDrive sign on.

 

Could this be down to the MDM scope? I have tried various group policies but can’t seem to get it to SSO.

 

Any advice would be greatly appreciated.

 

Many thanks,

Daniel

[snagrat]

Are you syncing devices using Entra Connect?

 

It’s been a while since I have done it as now fully cloud but before you had to sync users and devices to get the SSO working

[highsky]

The gpo settings for all the browsers are here:

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-quick-start

[Olliedawg]

Did you manage to resolve this one?

SSO works for us, but only on the 2nd login.

 

On the 1st login, when trying to sign into teams (before onedrive or edge is signed into), gives various script errors

Edited October 24, 2025 by Olliedawg

[Space_Munkey]

When you say first login works, what do you mean?

 

We have seamless sign-on working... dare I say, perfectly.

 

The issue you're describing feels like it could be related to part 6 of the link above not being configured:

 

User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Intranet Zone. Select Allow updates to status bar via script.

[robk]

We are finding that onedrive gives a "paused cloud" and if you click it, confirms email address, then askes if its Personal or Work/School. THEN logs in. Any ideas how to get rid of that prompt?

 

Settings in the link @highsky posted are in place.

[Space_Munkey]

Do you have policies set for OneDrive?

 

This is ours:

 

[robk]

Our GPO settings are very similar.