enterprise-sso

Windows 11 versions 24H2 and 25H2 now include a machine-level policy that lets IT administrators automatically accept single sign-on permission prompts on managed Microsoft Entra devices. Delivered with the July 14, 2026 Patch Tuesday update, the setting can remove an extra authentication...

Microsoft’s recent how‑to on issuing custom SSO claims from Entra ID using directory extension attributes gives administrators a practical, low‑friction way to inject organization‑specific data into SAML and OIDC tokens — and to do so only for selected user groups during sign‑in. The documented...