Intune - Shared iPad Mode, SSO & Microsoft Authenticator

[CHiLL]

I've managed to get SSO working on our iPads using Shared iPad mode, specifically where the user logs in with their federated Apple ID and then has to log into an app (such as Microsoft Word or Smoothwall Browser) manually using their Microsoft Entra credentials to activate the Microsoft Authenticator app. Once the user has authenticated into the first app, SSO kicks in and all other apps using SSO will automatically use the Authenticator app to sign them in without further prompts. This is required each time the user uses the iPad, be it a different iPad or the same iPad but their profile has been removed.

 

Does anyone know if it's possible to have Microsoft Authenticator automatically sign the user in after the user logs into the iPad and prevent the requirement to manually sign in to an app to kick start the Authenticator process?

 

We already have the following SSO app extension configuration settings applied:

 

Key: device_registration
Type: String
Value: {{DEVICEREGISTRATION}}

Key: browser_sso_interaction_enabled
Type: Integer
Value: 1

Key: disable_explicit_app_prompt
Type: Integer
Value: 1

Key: Enable_SSO_On_All_ManagedApps
Type: Integer
Value: 1

 

Edited April 8, 2025 by CHiLL