Anyone running windows 10 with SSO

[david_1152]

 

If you are - are you experiencing issues with SSO breaking intermittently?  Reboot the machine a few times and like magic it can start working again?  I guess I'm asking if it's just us?  

 

We've spent month fire fighting this issue but in truth are nowhere closer to knowing exactly what is causing it.  Is it the microsoft 'Hardening'?  If so, why isn't everyone left using windows 10 and sso in education experiencing the same thing?  Are we missing something? 

 

Any suggestions - very welcome.   Yes we should move to windows 11 but lots of our hardware will need replacing.. 

 

D   

 

[JRA]

I have all of 1 machine running LTSC W10, which is going in the bin first week of summer. Not sure how valuable this will be to you but it's not having any of those issues.

[david_1152]

Just to add...

 

 

 

 

We are using Windows 22H2 and have recently upgraded to 22H2.38

We are using MS Entra connect Sync with Pass-though Authentication.

We refresh our Azure SSO token every 30 days as recommended by Microsoft.

We use GPO to manage SSO with 365:

Computer Config/Admin Templates/OneDriveSilently sign in users to the OneDrive sync app with their windows credentials.

User config/Admin Templates/Microsoft Edge/HTTP authentication/configure list of allowed authentication servers

- autologon.microsoftazuread-sso.com

- https://autologon.microsoftazuread-sso.com

 

We have also tried the reg fix:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais\DisableCapiOverrideForRSA = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoftazuread-sso.com\autologon\https = 1

 

Anyone in the same boat, with the same issues?  Or is it just us..

 

Thanks

[404_WolfNotFound]

Possibly try letting Entra Connect do the SSO and disable SSO via GPO.

[Olliedawg]

Our IT suites are still running Windows 10 22H2 (ESU version).

 

We have SSO working for OneDrive, Teams, Microsoft Edge using Primary Refresh Token (PRT) 

 

Microsoft Entra Connect: Seamless single sign-on - Microsoft Entra ID | Microsoft Learn

 

We did initially have issues a while back (believe it was September time) where none of these devices would work with SSO for OneDrive or Teams (desktop clients). In the end we just re imaged the IT suites to solve it, so not actually sure what the issue was there.

 

 

[itskdog]

We have a small number of devices we weren't able to upgrade in time, so we have a handful of ESU licences for those machines.

 

Haven't heard reports of issues - fully Entra joined (no more AD) here.