Skip to content

Commit 1a08fb8

Browse files
authored
Update active-directory-aadconnect-sso-faq.md
1 parent 9d092af commit 1a08fb8

File tree

1 file changed

+17
-20
lines changed

1 file changed

+17
-20
lines changed

articles/active-directory/connect/active-directory-aadconnect-sso-faq.md

Lines changed: 17 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.workload: identity
1212
ms.tgt_pltfrm: na
1313
ms.devlang: na
1414
ms.topic: article
15-
ms.date: 08/07/2018
15+
ms.date: 09/04/2018
1616
ms.component: hybrid
1717
ms.author: billmath
1818
---
@@ -79,12 +79,11 @@ Follow these steps on the on-premises server where you are running Azure AD Conn
7979

8080
### Step 1. Get list of AD forests where Seamless SSO has been enabled
8181

82-
1. First, download, and install the [Microsoft Online Services Sign-In Assistant](http://go.microsoft.com/fwlink/?LinkID=286152).
83-
2. Then download and install the [64-bit Azure Active Directory module for Windows PowerShell](https://docs.microsoft.com/powershell/azure/active-directory/install-msonlinev1?view=azureadps-1.0).
84-
3. Navigate to the `%programfiles%\Microsoft Azure Active Directory Connect` folder.
85-
4. Import the Seamless SSO PowerShell module using this command: `Import-Module .\AzureADSSO.psd1`.
86-
5. Run PowerShell as an Administrator. In PowerShell, call `New-AzureADSSOAuthenticationContext`. This command should give you a popup to enter your tenant's Global Administrator credentials.
87-
6. Call `Get-AzureADSSOStatus`. This command provides you the list of AD forests (look at the "Domains" list) on which this feature has been enabled.
82+
1. First, download, and install [Azure AD PowerShell](https://docs.microsoft.com/powershell/azure/active-directory/overview).
83+
2. Navigate to the `%programfiles%\Microsoft Azure Active Directory Connect` folder.
84+
3. Import the Seamless SSO PowerShell module using this command: `Import-Module .\AzureADSSO.psd1`.
85+
4. Run PowerShell as an Administrator. In PowerShell, call `New-AzureADSSOAuthenticationContext`. This command should give you a popup to enter your tenant's Global Administrator credentials.
86+
5. Call `Get-AzureADSSOStatus`. This command provides you the list of AD forests (look at the "Domains" list) on which this feature has been enabled.
8887

8988
### Step 2. Update the Kerberos decryption key on each AD forest that it was set it up on
9089

@@ -118,26 +117,24 @@ To complete the clean-up process, follow steps 2 and 3 on the on-premises server
118117

119118
Run the following steps on the on-premises server where you are running Azure AD Connect:
120119

121-
1. First, download, and install the [Microsoft Online Services Sign-In Assistant](http://go.microsoft.com/fwlink/?LinkID=286152).
122-
2. Then download and install the [64-bit Azure Active Directory module for Windows PowerShell](http://go.microsoft.com/fwlink/p/?linkid=236297).
123-
3. Navigate to the `%programfiles%\Microsoft Azure Active Directory Connect` folder.
124-
4. Import the Seamless SSO PowerShell module using this command: `Import-Module .\AzureADSSO.psd1`.
125-
5. Run PowerShell as an Administrator. In PowerShell, call `New-AzureADSSOAuthenticationContext`. This command should give you a popup to enter your tenant's Global Administrator credentials.
126-
6. Call `Enable-AzureADSSO -Enable $false`.
120+
1. First, download, and install [Azure AD PowerShell](https://docs.microsoft.com/powershell/azure/active-directory/overview).
121+
2. Navigate to the `%programfiles%\Microsoft Azure Active Directory Connect` folder.
122+
3. Import the Seamless SSO PowerShell module using this command: `Import-Module .\AzureADSSO.psd1`.
123+
4. Run PowerShell as an Administrator. In PowerShell, call `New-AzureADSSOAuthenticationContext`. This command should give you a popup to enter your tenant's Global Administrator credentials.
124+
5. Call `Enable-AzureADSSO -Enable $false`.
127125

128126
>[!IMPORTANT]
129127
>Disabling Seamless SSO using PowerShell will not change the state in Azure AD Connect. Seamless SSO will show as enabled in the **Change user sign-in** page.
130128
131129
### Step 2. Get list of AD forests where Seamless SSO has been enabled
132130

133-
Follow steps 1 through 5 below if you have disabled Seamless SSO using Azure AD Connect. If you have disabled Seamless SSO using PowerShell instead, jump ahead to step 6 below.
131+
Follow tasks 1 through 4 below if you have disabled Seamless SSO using Azure AD Connect. If you have disabled Seamless SSO using PowerShell instead, jump ahead to task 5 below.
134132

135-
1. First, download, and install the [Microsoft Online Services Sign-In Assistant](http://go.microsoft.com/fwlink/?LinkID=286152).
136-
2. Then download and install the [64-bit Azure Active Directory module for Windows PowerShell](http://go.microsoft.com/fwlink/p/?linkid=236297).
137-
3. Navigate to the `%programfiles%\Microsoft Azure Active Directory Connect` folder.
138-
4. Import the Seamless SSO PowerShell module using this command: `Import-Module .\AzureADSSO.psd1`.
139-
5. Run PowerShell as an Administrator. In PowerShell, call `New-AzureADSSOAuthenticationContext`. This command should give you a popup to enter your tenant's Global Administrator credentials.
140-
6. Call `Get-AzureADSSOStatus`. This command provides you the list of AD forests (look at the "Domains" list) on which this feature has been enabled.
133+
1. First, download, and install [Azure AD PowerShell](https://docs.microsoft.com/powershell/azure/active-directory/overview).
134+
2. Navigate to the `%programfiles%\Microsoft Azure Active Directory Connect` folder.
135+
3. Import the Seamless SSO PowerShell module using this command: `Import-Module .\AzureADSSO.psd1`.
136+
4. Run PowerShell as an Administrator. In PowerShell, call `New-AzureADSSOAuthenticationContext`. This command should give you a popup to enter your tenant's Global Administrator credentials.
137+
5. Call `Get-AzureADSSOStatus`. This command provides you the list of AD forests (look at the "Domains" list) on which this feature has been enabled.
141138

142139
### Step 3. Manually delete the `AZUREADSSOACCT` computer account from each AD forest that you see listed.
143140

0 commit comments

Comments
 (0)