updates to federated authentication

This commit is contained in:
Paolo Matarazzo
2022-09-07 10:15:45 -04:00
parent d16e83c6a0
commit 0eab4b9835
5 changed files with 33 additions and 36 deletions

View File

@ -26,18 +26,24 @@ items:
href: set-up-school-pcs-shared-pc-mode.md
- name: Windows 10 configuration recommendations for education customers
href: configure-windows-for-education.md
- name: Take tests and assessments in Windows
href: take-tests-in-windows-10.md
- name: How-to-guides
items:
- name: Use the Set up School PCs app
href: use-set-up-school-pcs-app.md
- name: Take tests and assessments in Windows
- name: Configure education features
items:
- name: Overview
href: take-tests-in-windows-10.md
- name: Configure education themes
href: edu-themes.md
- name: Configure Stickers
href: edu-stickers.md
- name: Configure federated authentication
href: edu-federated-authentication.md
- name: Configure Take a Test on a single PC
href: take-a-test-single-pc.md
- name: Configure a Test on multiple PCs
href: take-a-test-multiple-pcs.md
- name: Use the Set up School PCs app
href: use-set-up-school-pcs-app.md
- name: Change Windows edition
items:
- name: Switch to Windows 10 Pro Education in S mode from Windows 10 Pro in S mode

View File

@ -54,34 +54,17 @@ IT administrators can configure federated authentication on Windows devices usin
- **Name**: enter a descriptive name for the profile
- **Description**: enter a description for the profile. This setting is optional, but recommended
1. Select **Next**
1. In **Configuration settings**, select **Add**
1. In **Add Row**, enter the following properties:
- Name: enter a name, for example `EnableWebSignInForPrimaryUser`
- OMA-URI: `./Vendor/MSFT/Policy/Config/FederatedAuthentication/EnableWebSignInForPrimaryUser`
- Data type: **Integer**
- Value: **1**
1. Select **Save**
1. Select **Add**
1. In **Add Row**, enter the following properties:
- Name: enter a name, for example `ConfigureWebSignInAllowedUrls`
- OMA-URI: `./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebSignInAllowedUrls`
- Data type: **String**
- Value: semicolon separated list of domains, for example `samlidp.clever.com;clever.com;mobile-redirector.clever.com`
1. Select **Add**
1. In **Add Row**, enter the following properties:
- Name: enter a name, for example `IsEducationEnvironment`
- OMA-URI: `./Vendor/MSFT/Policy/Config/Education/IsEducationEnvironment`
- Data type: **Integer**
- Value: **1**
1. Select **Add**
1. In **Add Row**, enter the following properties:
- Name: enter a name, for example `ConfigureWebCamAccessDomainNames`
- OMA-URI: `./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebCamAccessDomainNames`
- Data type: **String**
- Value: semicolon separated list of domains, for example `clever.com`
> [!NOTE]
> This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that are allowed to use the webcam during the sign-in process.
1. Select **Save**
1. In **Configuration settings**, select **Add** and enter the following properties, repeating the process for each row and selecting **Save**:
| Name | OMA-URI | Data type | Value |
|-|-|-|-|
| `EnableWebSignInForPrimaryUser` | `./Vendor/MSFT/Policy/Config/FederatedAuthentication/EnableWebSignInForPrimaryUser` | Integer | 1|
| `ConfigureWebSignInAllowedUrls` | `./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebSignInAllowedUrls` | String | Semicolon separated list of domains, for example `samlidp.clever.com;clever.com;mobile-redirector.clever.com`|
| `IsEducationEnvironment` | `./Vendor/MSFT/Policy/Config/Education/IsEducationEnvironment` | Integer | 1|
| `ConfigureWebCamAccessDomainNames` | `./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebCamAccessDomainNames` | String |This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that are allowed to use the webcam during the sign-in process, separated by a semicolon. For example `clever.com`|
:::image type="content" source="images/edu-federated-authentication-settings.png" alt-text="Custom policy showing the settings to be configured to enable federated authentication" lightbox="edu-federated-authentication-settings.png" border="true":::
1. Select **Review + Save**
1. Select **Next**
1. In **Scope tags**, assign any applicable tags (optional)
1. Select **Next**

View File

@ -1,5 +1,5 @@
---
title: Stickers for Windows 11 SE
title: Configure Stickers for Windows 11 SE
description: Description of Stickers for Windows 11 SE and how to configure them via MDM
ms.date: 09/15/2022
ms.prod: windows

Binary file not shown.

After

Width:  |  Height:  |  Size: 116 KiB

View File

@ -47,6 +47,14 @@ landingContent:
url: windows-11-se-overview.md
- text: Windows 11 SE settings
url: windows-11-se-settings-list.md
- linkListType: whats-new
links:
- text: Configure education themes
url: edu-themes.md
- text: Configure Stickers
url: edu-stickers.md
- text: Configure federated authentication
url: edu-federated-authentication.md
- linkListType: video
links:
- text: Deploy Windows 11 SE using Set up School PCs