Single Sign On (SSO) - How it Works!

This time I take a look at Azure AD Connect and discuss just how does SSO or Single Sign on actually work with Azure Active Directory. With a world where users log on from multiple systems and devices often using multiple usernames and passwords. It’s difficult to keep track. Single sign on or SSO is the convenient solution that will simplify administration as well as user frustration. Also, when secured with multi factor authentication, it can strengthen your security no end. So if you’re ready to learn this is a session combines an easy to understand tutorial, together with demos that show how it actually works. I’ve time-coded the session so you can jump in and out for your convenience.

Time codes

00:00 Introduction
02:39 Single Sign on SSO - The Theory Bit
09:17 Single Sign On - Deploying SSO With Azure AD Connect
14:38 Single Sign On SSO - After the Sync. user configuration
16:00 Single Sign On SSO The end user experience
17:36 Session conclusions

[andrewwilson]

Great content in all your videos I've watched so far. Would love a follow up vid on sso that covers enterprise applications, app registration and using sso with third party sites.

[supriyochatterjee]

Probably the best explanations available, I watched a video on SSO from the king of Computer Networking Mr.David Bombal and it was just one of a kind awesome and this one from Mr.Andy Malone is just another awesome one

[neilgoodman]

Dear Mr. Malone, You're the tops. Thank you again.
I wish I could get SSon as a single user.
Respectfully, NHG

[makeitcloudy]

wow, it's one of the best explanations I've seen so far!
great channel, with structualized content

[bechirbendhief]

Thank you for efforts and for your availability

[MausSpaece]

Discovered you earlier today. I've already learned a few things from your videos! Thanks so much!!

[manikandans]

awesome stuff.
Do we need to run multiple instances of AD Connect if we are an Enterprise customer spanning globally.

[ScorpioRsing]

Andy (et all), what is the best community, (preferably FB or another gui app), to share ideas, ask questions, and learn from each other, (aside from reddit)? I'm part of a very small group of 3 Sysadmins, we are essentially an MSP, and I feel we're quite behind in some areas. Your videos are helping! :)

[DanBlakerd]

Thanks for an excellent walk-though. With this configuration, if MFA is enabled in Azure AD, is the user prompted for a second auth method at Windows login?

[murattasova]

Thank you Andy! Very good exploitation and frustrating that Transdev were I work for is using ADFS.

[terryevp]

Thanks very much and great explanation..!!!

[jojolization]

Hi Andy, thank you for the information.
we company now get rid of the AD server and migrated all users/computers to Azure AD environment now. So, how I can set to use the single sign-on? is it possible for SSO without local AD and AD Connect?

[mortenwiingreen]

Hi Andy, In a coorporate setup with almost 1000 users, would you prefer to use Password Hash or Passthrough? For Passthrough we would need at least 2 passthrough servers with the agent installed. For Password Hash we would just need AZure AD Connect.. Why choose one or the other?? Thanks for all your great demo, I watch almost all of them for a long time now :)

[levonmusic]

Hi Andy. Your explanations are very well thought out and easy to understand. I have a question related to SSO within the cloud. I am wondering how to configure SSO if I have everything in the cloud. that is, Azure AD and Azure virtual desktops. I need to ensure that the user who connects using remote desktop is not asked for a password when trying to open Outlook. Is it possible to configure, and do I need for that Azure AD connect tool, or it should be done in other way?

[Cons]

Hi, and apologize if you already mentioned this in the video, in under 2min and but wanted to ask. When we are already logged into soo, using front end. If the front end hits a service of the backend.. are we passing user info into the backend?

I’m asking bec I would like to lean like who initiated the call

[sergentntse]

Is there a possibility to explain migrating SSO flows on the NAM to Azure?

[buugedy]

Hi.

15:02 - please tell, why all your AD users are disabled? This would be a catastrophe in real production environment. :)

Regards,
Andrej

[bouxesas]

Hello and thanks for the tutorial. I am struggling to get SSO to work on my domain, but it does not. My local domain name is different from Azure domain name. Maybe this is the issue? Does the local domain name needs to be verified in Azure AD/Custom domains?

[peterkorsbjerg]

Hi Andy, .. great content ! - What if you have all your users in Azure AD and want to add a local server. Can the Azure AD users be syncronized to the local server, so you can share folders on the local server with selected users from the Azure AD?

[vinu]

Dear Sir. Thank you for your great videos.
At the UPN page I can see your having both local admin and azure ID. However, in my test VM I followed your steps from this and find only local admin ID but not the Azure ID. Did twice with same results. What do you think I am doing wrong Sir. I continued still and the SSO doesn't work.