How it works...
When enabling PTA in Azure AD Connect, the Windows Server running Azure AD Connect gets the PTA agent installed.
To allow Seamless SSO, people using domain-joined devices need to communicate using Kerberos with the Azure AD Authentication Service with their domain accounts. Kerberos is Windows Integrated Authentication (WIA) in browser speak. WIA is not available by default for all websites in browsers for security reasons. The Azure AD Authentication Service needs to be added to the Intranet Sites list of Internet Explorer and Edge to allow WIA.
Mozilla Firefox does not automatically use Kerberos authentication. Each user that wants to use Firefox with the Seamless Sign-on feature needs to add the https://autologon.microsoftazuread-sso.com ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access