![]() ![]() For example, a good policy name is iOS: Microsoft Enterprise SSO plug-in. Name your policies so you can easily identify them later. Name: Enter a descriptive name for the policy.In Basics, enter the following properties: Profile type: Select Templates > Device features.Sign in to the Microsoft Intune admin center. ![]() This profile includes the settings to configure the SSO app extension on devices. In the Microsoft Intune admin center, create a device configuration profile. Create a single sign-on app extension configuration profile Supports the following apps: - Apps, websites or services integrated with ADįor more information on the single sign-on extension, go to Single sign-on app extension. Supports the following apps: - Microsoft 365 - Apps, websites or services integrated with Microsoft Entra ID Uses the Microsoft Entra ID SSO app extension type Single sign-on app extension with Kerberos To determine the correct SSO extension type for your scenario, use the following table: Microsoft Enterprise SSO plug-in for Apple Devices ![]() Be sure to create separate device profiles for each extension type you plan to use on your devices. The SSO Redirect and Kerberos extension types can both be used on a device at the same time. The Microsoft Enterprise SSO plug-in uses the SSO Payload Type with Redirect authentication. The SSO app extension is designed to improve the sign-in experience for apps and websites that use these authentication methods. When you use the SSO app extension, you use the SSO or Kerberos Payload Type for authentication. Users don't need to use or configure the Microsoft Authenticator app, it just needs to be installed on the device. On iOS/iPadOS devices, Apple requires that the SSO app extension and the Microsoft Authenticator app be installed. Or, admins can deploy the app using an MDM policy. Users can install the Microsoft Authenticator app manually.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |