Azure AD SSO Query

Chalee 12 Reputation points
2019-12-05T12:27:15.187+00:00

Hi all,

We have on prem AD which we sync to Azure AD using AD connect and this seems to be working OK. We have created an Enterprise App in Azure for an externally hosted app and configured SSO. This works fine for users on a domain joined device.

If I try and access the app on a non domain joined device I get to the MS sign-on page and enter my email address and password. It says my password is incorrect, but I know its right as it works with my on prem account. Should these details not all get synced as part of the AD connect sync.

If I reset my password in Azure AD I can them login in and access the app successfully. Should I be able to access the app on a non domain joined device? Surely I shouldn't have to reset my password in Azure AD?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,116 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 36,866 Reputation points Microsoft Employee
    2019-12-07T01:11:14.547+00:00

    If you're using a Microsoft account and not an Azure AD account, you can run into this issue. Can you confirm that you are using an Azure AD created account when this happens?

    AD Connect prerequisites:

    Accounts
    An Azure AD Global Administrator account for the Azure AD directory you wish to integrate with. This must be a school or organization account and cannot be a Microsoft account.
    This list is starting to be quite long so I understand that it is easy to miss. As soon as I pick something up in these forums, I add it to the documentation.

    It is also possible that there is a connectivity issue or duplicate object. https://video2.skills-academy.com/en-us/azure/active-directory/hybrid/tshoot-connect-connectivity

    Also, check your conditional access policies to make sure there isn't something blocking unjoined devices.

    2 people found this answer helpful.
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.