Hi all! AVD 24H2, Hybrid Joined, SSO with Entra Credentials active, Fslogix Roam Identity disabled. Outgoing internet access (NAT GW) excluded from CA Policies for MFA. We randomly get this in Teams (need to sign in again) and in Office applications. I found this Disabling DMA SSO compliance to fix the Continue to Sign in but should you really need to do this?

I am also interested how people handle this. (I have customer with W11 23H2 Horizon VDI), and this SSO-Info prompt is giving me hard times. So curious what another are doing.

Jep, I did that on any VDI (Win11 Single or Multi-Session) here's also another blog about that. You have to edit the json again after Windows Patches... 🙂 https://pureinfotech.com/windows-11-10-json-file-control-features-eu-users/

As I read elsewhere editing the .json can brake Windows Updates. Did you see issues with that?

@Robert Magasi yes, the first version of the script that I linked to had that issue but I believe that he fixed it in the other version, 2.

yes, right with the vivetool. But somehow i dont feel comfortable with that way also.

@Robert Magasi, is it the same issue, or just SSO in general?

when I edit the .json file. (Remove the country code from the disabled section) then SSO works as it should. So for me this means its this issue with the SSO-Info Prompt.

Even if it should break WU for us it does not matter because I do not run the script on the master image.