I'm getting this enabled after and after on my cus...
# citrix-vadj
Julian Jakob
09/04/2024, 6:38 PMI'm getting this enabled after and after on my customer's tenants. How do you deal with that on non-persistent VDI's? I mean, landing every day on another VDI will bring that popup every day which is annoying. Anyone found sth to control on Entra like a dynamic group of the hybrid joined VDI objects for don't ever popup that message and doing just silent SSO like it did for the last years? Thank you! Upcoming changes to Windows Single Sign-On | Windows IT Pro (microsoft.com)
👀 1
r
Ray Davis
09/04/2024, 6:44 PMI wonder if this will still help? Something I ran into a while back. It's not apples to apples but close.
https://www.alitajran.com/microsoft-365-disable-stay-signed-in-prompt/
b
Balint Oberrauch
09/05/2024, 1:34 PMWe have a MS case open since today for this.. I've not found any way to disable this popup and it's preventing SSO for my VDI devices.
j
Julian Jakob
09/06/2024, 7:17 AMThanks Ray, sadly it's not the same and the settings you mentioned from the blogpost do not work with that new EU-Popup. Balint, I'm happy to get updates from your MS-Case, I hope there's any method to prevent that...
r
Ray Davis
09/09/2024, 11:33 PMOkay, thanks guys. I wasn't positive here
b
Balint Oberrauch
09/10/2024, 5:40 AMNo worries. My case is still
open, I'll keep you updated.
👍 2
Balint Oberrauch
09/16/2024, 8:06 PMReply from MS Support: the change was done on the most recent Windows update.
Still no fix on this but working on it.
Balint Oberrauch
09/20/2024, 3:30 PMNews:
How often will this notice appear to my users?
A: This notice appears once per user per device. After selecting Continue, the notice will no longer appear. The notice will only appear again in the first app the user accesses after signing in to Windows if the user has not signed in to Windows for 90 days, or they remove and re-add a cloud account to Windows.
How is user's choice stored
When the user chooses Continue this is flagged in the PRT. They should not be re-prompted as long as that PRT is used and gets renewed. If that PRT expires they will be re-prompted. If the customer is using a system that does not persist a PRT, non-persistent VMs for example, they will receive the prompt each time they receive a new RT or PRT. For some configurations which rely on WIA (Windows Integrated Authentication) only, this means one prompt per app. The user will need to click Continue on each device they use.
Net result: PRT-based users will see 1 notice total per account, per device, and then will not see the notice again. WIA-based users will see 1 notice per app.
Note: If the user chooses don’t sign in that choice for that prompt only and is not saved; they will be re-prompted
👍 1
Balint Oberrauch
09/20/2024, 3:32 PMWe have escalated this to the Entra/SSO Team at MSFT.