Has anyone run into issues with Federated Authentication Services (FAS) where the user certificate fails to load into the user's Personal certificate store? The "In-session Behavior" GPO is configured for {No consent requested; 30 seconds; Enabled} and the Default rule (only one) is configured to allow in-session use of the certificate. I haven't found any errors to indicate a failure to import the certificate at logon and nothing appears to show up in CDFControl. For whatever reason, the certificate just never imports, as if the GPO is not being acknowledged or there is some cached value of the Default rule with in-session use disabled. Any assistance is appreciated!

There was a bug on this. Cant remember the version. What do you use in-session certificates for?

O365 logins (Teams, OneDrive, O365 licensing)

is that because you aren't using CBA as well to get a prt? Anyway could be a bug i think it was in 2311