Mastering Active Directory - Second Edition

SSO experience

In an on-premises environment, we usually need to add additional components, such as Microsoft AD FS, in order to enable SSO for applications. But using Azure AD, we can provide SSO experience for SaaS workloads, PaaS workloads, or on-premises workloads, without depending on additional components or complex configurations. Also, if required, we can use additional security features such as Azure Multi-Factor Authentication (MFA) or conditional access rules, along with SSO, in order to add an additional layer of protection to the sign-in process.