Azure AD无缝单点登录仅在使用密码登录时有效，但在Windows Hello时无效？ [英] Azure AD Seamless Single Sign-On only works when password login used but not with Windows Hello?

问题描述

只要您使用密码登录，我们就可以使用Azure AD SSO。如果您使用带有Hello摄像头（Surface Pro）或Hello指纹（Lenovo X1 Yoga）的设备，则在访问本地资源时会提示输入引脚然后失败。这是预期的行为吗？

---

Brian Hoyt

解决方案

我应该提到这是针对Azure AD加入的机器尝试访问本地AD服务器。在阅读中 https://docs.microsoft.com/ en-us / azure / active-directory / connect / active-directory-aadconnect-sso
似乎可能不是SSO的预期用途？我感觉Azure AD加入的机器会以某种方式访问​​（通过SSO？）本地AD资源。这主要用于打印，因为Azure AD云打印尚不存在
。

对这些方案的任何建议都表示赞赏。

We have a working Azure AD SSO as long as you login with password. If you use a device with Hello camera (Surface Pro) or Hello fingerprint (Lenovo X1 Yoga) it prompts for pin when accessing local resources then fails. Is this expected behavior?

---

Brian Hoyt

解决方案

I should mention this is for Azure AD Joined machines trying to access local AD servers. Which in reading https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso seems might not be the intended usage of SSO? I was under the impression (and it works sort of) that Azure AD joined machines would somehow be able to access (via SSO?) local AD resources. This is primarily for printing, since Azure AD cloud printing doesn't exist yet.

Any advice on these scenarios appreciated.

这篇关于Azure AD无缝单点登录仅在使用密码登录时有效，但在Windows Hello时无效？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！