The following forum(s) are migrating to a new home on Microsoft Q&A (Preview): Azure Active Directory!

Ask new questions on Microsoft Q&A (Preview).
Interact with existing posts until December 13, 2019, after which content will be closed to all new and existing posts.

Learn More

 none
OneDrive auto login (Security / information safety issue) RRS feed

  • Question

  • OneDrive support asked me to open a ticket here.

    The basic issue is that with the Prompted Known Folder Move of OneDrive, nothing will happen unless a user stumbles on the icon in the task pane, and logs in.

    From an information security standpoint, this is horrible.

    Silent known folder move might work, but it's not clear from the documentation if we need AAD free or premium.

    So ... ideally, OneDrive, if the GPO to move the known folders (either silent or prompted) is set, really needs to pop up a login dialog box like Teams does. 

    Without doing that, most users will ignore it, and the information wouldn't be placed into the Corporate cloud. This is an information risk as well as a security problem.

    Secondly, if SSO is required, apparently this requires Azure Active Directory, but none of the documentation is clear on what level of Azure Active Directory is required to make OneDrive login.

    Can anyone help?

    Thanks



    == John ==

    Wednesday, October 16, 2019 11:33 PM

All replies

  • This is the same issue as here: https://social.msdn.microsoft.com/Forums/en-US/ddf55284-71cc-4614-a4da-e8ef30c8c0dd/onedrive-auto-logon?forum=WindowsAzureAD 

    Microsoft supported asked me to open a new issue instead of tagging onto the old one. (Thread creep ...)


    == John ==

    Wednesday, October 16, 2019 11:34 PM
  • One Drive uses SSO to login and it is a silent login. As for the Azure AD version, SSO is available on all editions of Azure AD. While in the Free and Basic editions, SSO configuration is limited to 10 applications across the tenant. While in the Premium editions, there is no limitation of applications that can be configured.

    Ref: Azure AD Pricing Tiers

    -----------------------------------------------------------------------------------------
    Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

    Thursday, October 17, 2019 9:28 AM
    Moderator
  •  Please remember to mark one of the responses as answer if your question has been answered. If not please let us know if there are anymore questions. Thanks

    Friday, October 25, 2019 10:54 PM
    Moderator