Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Intune Joined Devices on Firefox

more options

Hello,

Our organization is attempting to implement a Conditional Access policy that restricts access to certain websites to Intune joined devices only. The error message mentions that I need to enable a setting from within Firefox called Windows SSO, mentioned here: https://support.mozilla.org/en-US/kb/windows-sso. This setting is already enabled and I am still getting an error.

Is there anything else that could be causing this?

Hello, Our organization is attempting to implement a Conditional Access policy that restricts access to certain websites to Intune joined devices only. The error message mentions that I need to enable a setting from within Firefox called Windows SSO, mentioned here: https://support.mozilla.org/en-US/kb/windows-sso. This setting is already enabled and I am still getting an error. Is there anything else that could be causing this?

Chosen solution

We had a similar issue. Even with Windows SSO enabled, Firefox needs to be version 91+ and the device must be Intune compliant. Also, check network.negotiate-auth.trusted-uris in about:config. Edge often works better with Conditional Access.

Read this answer in context 👍 0

All Replies (3)

more options

Would you mind opening a bug here:

https://bugzilla.mozilla.org/enter_bug.cgi?product=Core&component=Networking

The networking team can help research what is happening. We have lots of logging for this.

what version of Firefox are you using?

Helpful?

more options

138.0.1. I opened the Bugzilla ticket here: https://bugzilla.mozilla.org/show_bug.cgi?id=1965984

Helpful?

more options

Chosen Solution

We had a similar issue. Even with Windows SSO enabled, Firefox needs to be version 91+ and the device must be Intune compliant. Also, check network.negotiate-auth.trusted-uris in about:config. Edge often works better with Conditional Access.

Helpful?

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.