This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 11%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB1%3C/text%3E%3C/svg%3E)
We are currently federated to Entra ID with ADFS on premises. We are attempting to run the staged rollout feature with PTA and seamless sign on. Following this article: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-staged-rollout
When we get to the point of moving the slider to on for PTA and hit OK on the are you sure message, we get the message "Manage staged rollout
'Pass-through authentication' is already enabled for all users in this tenant, cannot enable staged rollout."
Not sure what to do with this message since we are federated.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@BrianSiegman-1559 Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.
Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.
What does this show in Entra portal under the Microsoft Entra Connect menu?
PTA is enabled with one agent.
Ok, then so yea, that makes sense then. At this point, you have it enabled, but otherwise is it not working?
Yep, I cannot move the slider to make the 'group' button active.
Yea I think you wont be :)
Since its enabled it should work for everyone now though?
Agreed, but there is no way to take advantage of the staged rollout. Turning off Federation and switching to PTA all at once is not ideal. Thanks for taking a look.
Thanks Andy, think I found out why. Now to figure out how to fix. Azure AD Connect shows the User sign in option set to PTA. Federation is not selected in AADConnect (since only one radio button can be selected). I am assuming Federation was setup with powershell and not through the Connect UI.
Or it was enabled outside of AADConnect. You can enable and configure ADFS and not involve AADConnect.
Federation setup via Powershell and PTA was setup with AADConnect beforehand. Thanks for your time. I will disable PTA via PS or change logon method via AADConnect.