Seemless SSO not working

Question

We have synchronization working with password hash and have been testing seemless sso by going to the website https://myapps.microsoft.com/.com. When I go to that site on a PC that is on the domain and signed in I am prompted to enter my email address. If I do I am prompted to enter my password. I don't believe we should be asked to enter either.

Now the verified domain is set as my primary UPN but is not the default domain suffix, the default domain suffix is a non-routeable .local style domain. So under Seemless single sign on under On Premise Domain Name it shows the non-routeable domain. Maybe this is an issue, I am not sure. As I mentioned my account is configured with the primary UPN of the routable domain and shows correctly under my account in Azure.

This is a new setup and it has never worked.

We did follow these two guides.
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-sso
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso

Answer 1

Nevermind. I think I found my answer in the deployment guide.

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/plan-sso-deployment
and
https://learn.microsoft.com/en-gb/azure/active-directory/user-help/my-apps-portal-end-user-access

We do not have the browser add-ons installed.

Answer 2

That's always the first thing I ask in such scenarios. It's usually easiest to just use Edge and confirm that everything is OK with the configuration. Anyway, let us know if you have issues after configuring the other browsers.

Answer 3

Sorry to bring up an old conversation, but I have the same issue, and setup as above, and using Edge Chromium for testing, so it isn't a add-on issue.