
Run the following command and give Office 365 Admin credentials.Get-MsolDomainFederationSettings –DomainName Ī sample configuration snapshot for SSO is shown below:ĥ.To enable modern authentication for Exchange Online, which supports SAML web browser based SSO profile for certain clients such as Outlook 2016 in desktops, execute the following commands: Set-MsolDomainAuthentication -DomainName $dom -FederationBrandName $FedBrandName -Authentication Federated -PassiveLogOnUri $url -SigningCertificate $certData -IssuerUri $issuer -ActiveLogOnUri $ecpUrl -LogOffUri $logouturl -PreferredAuthenticationProtocol SAMLPĤ.To verify the SSO configuration run the following command The Certificate content from the downloaded file should be assigned to $certData parameter.įederation cannot be configured on the default O365 domain.Įnsure that the federation is not enabled with the same URL’s on any other domain.


$url=” $logouturl=” $issuer = “ $ecpUrl=” $certData=””ĭomain Certificate Data can be obtained from PCS by navigating to Authentication->Signing In->Sign-in SAML->Metadata Provider and clicking on ‘ Download Metadata’. Set-MsolDomainAuthentication -Authentication managed -DomainName ģ.Execute the following commands in PowerShell Prompt for SSO configuration: Ensure that the machine used to connect has all the components mentioned in Prerequisites section installed.ġ.Open Windows Powershell and execute the command “connect-msolservice” and Provide Microsoft Admin credentials to connect to Microsoft Azure Active Directory.Ģ.Run the following command to enable SSO for the domain: To enable Single Sign-On on Office 365 Service Provider, login to Local Windows AD/LDAP Server with supported powershell and internet connection to connect to Azure AD. See Cloud Secure Administration Guide > Third Party Integration and Configuration > Configuring Pulse Workspace Configuring Office 365.See Cloud Secure Administration Guide> Configurations > Basic Configurations (Mandatory).The admin needs to configure PCS as an Identity Provider, O365 as a Service Provider and PWS to provision and push the profile information on mobile clients.įor basic configurations details, refer the following sections:

This section covers the configurations that are involved in the deployment.
