question

tarouchabi-7271 avatar image
0 Votes"
tarouchabi-7271 asked LuDaiMSFT-0289 commented

how to enable SSO on my company's iphone with ios sso extention.

Can I enable SSO on my company's iphone with ios sso extention? My verification "Microsoft Azure AD","Redirect" failed. Please tell me the setting method.

https://docs.microsoft.com/en-us/mem/intune/configuration/ios-device-features-settings#settings-apply-to-all-enrollment-types-1

mem-intune-generalmem-intune-device-configurations
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered LuDaiMSFT-0289 commented

@tarouchabi-7271 Thanks for posting in our Q&A.

For this issue, I have done a lot of research. For more detailed manual configuration about sso extention, we can refer to the following aticle:
https://docs.microsoft.com/en-us/azure/active-directory/develop/apple-sso-plugin#manual-configuration-for-other-mdm-services

I also find the step by step blog written by Michael. It is very detailed.
https://msendpointmgr.com/2020/10/14/enable-microsoft-enterprise-sso-plug-in-for-apple-devices-through-intune/
Note: Non-Microsoft link, just for the reference.

Hope the above information will help.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I have already confirmed 2 URLs. And I verified.
What are the differences between types "Microsoft Azure AD", "Redirect", "Creditional"?

The Redirect is Native App <---> Single Sign-on Extension <---> Idp.
The Creditional is Native App <---> O365 <---> Single Sign-on Extension <---> Idp.

I think. Microsoft app and Chrome etc. does not apply sso?



0 Votes 0 ·

@tarouchabi-7271 Please understand that SSO is a feature in Azure AD, intune just can configure these settings. To understand SSO more clearly, it is better to contact Azure AD to get more accurate help. Here is the online support link:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-troubleshooting-support-howto

Hope it will help.

0 Votes 0 ·