This message was deleted.

For non-autologin machines we are using M365 Shared Computer Activation. Auto-login machines must use web apps (and don't quote me here but I believe SSO is handled with Imprivata).