I am just missing one part - is the registration part in CP automated for you? Example: after the completed ADE enrollment, does CP still requires user to authenticate for the second time even though there is a user-affinity at the enrollment stage (users have to SSO auth to start the enrollment).
You mean after a completely "clean" ADE enrollment, right? It gets the UPN/UserID from the Setup Assistant token and just passes it to PSSO so that e.g. Company Portal can use it, is it correct?
Also one more factual mistake in your article - the "old enrollment policy" is not a policy. They are called ADE Profiles and now, Microsoft has changed them to Enrollment Policies. So "old profiles" -> "new policies".
Yes and No. PSSO doesn't exist on iOS/iPadOS. Authentication runs via the SSO extenstion. The first time you have to login in the CP and after that, although in my experience, the user is automatically logged in the CP app.
About the profiles/policy thing, I changed that, also in the screenshots, even though I've read the article countless times.
I can still read the yellow "Old enrollment policy" on the screenshot.
Please consider it as a feedback, I never meant to be rude or just use it to point out all of your mistakes (we all do them everyday...).
And apprecaite your time and effort to share the knowledge with the community even though this is purely Microsoft's job to do as they ask for a s... ton of money for their products and provide no support and documentation at all...
Hey Jeroen,
I am just missing one part - is the registration part in CP automated for you? Example: after the completed ADE enrollment, does CP still requires user to authenticate for the second time even though there is a user-affinity at the enrollment stage (users have to SSO auth to start the enrollment).
Hi Bartosz,
Can't remember exactly, but when I open now the CP app, the account is logged in automatically.
You mean after a completely "clean" ADE enrollment, right? It gets the UPN/UserID from the Setup Assistant token and just passes it to PSSO so that e.g. Company Portal can use it, is it correct?
Also one more factual mistake in your article - the "old enrollment policy" is not a policy. They are called ADE Profiles and now, Microsoft has changed them to Enrollment Policies. So "old profiles" -> "new policies".
Yes and No. PSSO doesn't exist on iOS/iPadOS. Authentication runs via the SSO extenstion. The first time you have to login in the CP and after that, although in my experience, the user is automatically logged in the CP app.
About the profiles/policy thing, I changed that, also in the screenshots, even though I've read the article countless times.
Thank you for your answer.
I can still read the yellow "Old enrollment policy" on the screenshot.
Please consider it as a feedback, I never meant to be rude or just use it to point out all of your mistakes (we all do them everyday...).
And apprecaite your time and effort to share the knowledge with the community even though this is purely Microsoft's job to do as they ask for a s... ton of money for their products and provide no support and documentation at all...