diff --git a/education/windows/federated-sign-in.md b/education/windows/federated-sign-in.md
index 2a0b87280d..3cc2845c35 100644
--- a/education/windows/federated-sign-in.md
+++ b/education/windows/federated-sign-in.md
@@ -54,14 +54,10 @@ To configure federated sign-in using Microsoft Intune, [create a custom profile]
|
OMA-URI: **`./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebCamAccessDomainNames`** Data type: **String** Value: This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that re llowed to use the webcam during the sign-in process, separated by a semicolon. For example: **`clever.com`**|
| OMA-URI: **`./Vendor/MSFT/SharedPC/EnableSharedPCMode`** Data type: **Boolean** Value: **False**|
-:::image type="content" source="images/federated-authentication-settings-intune.png" alt-text="Custom policy showing the settings to be configured to enable federated sign-in" lightbox="images/edu-federated-authentication-settings.png" border="true":::
+:::image type="content" source="images/federated-authentication-settings-intune.png" alt-text="Custom policy showing the settings to be configured to enable federated sign-in" lightbox="images/federated-authentication-settings-intune.png" border="true":::
Assign the policy to a security group that contains as members the devices that require federated sign-in.
-```OMA-URI
- ./Vendor/MSFT/Policy/Config/FederatedAuthentication/EnableWebSignInForPrimaryUser
-```
-
#### [:::image type="icon" source="images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg)
To configure federated sign-in using a provisioning package, use the following settings:
@@ -80,12 +76,24 @@ Apply the provisioning package to the devices that require federated sign-in.
#### [:::image type="icon" source="images/icons/group-policy.svg"::: **GPO**](#tab/gpo)
-This setting is not available in Group Policy.
+This setting cannot be configured via Group Policy.
#### [:::image type="icon" source="images/icons/registry.svg"::: **Registry**](#tab/reg)
This setting cannot be configured via registry.
+#### [:::image type="icon" source="images/icons/windows-os.svg"::: **CSP**](#tab/csp)
+
+To configure federated sign-in using Configuration Service Providers, use the following settings:
+
+| Setting |
+|--------|
+| OMA-URI: **`./Vendor/MSFT/Policy/Config/FederatedAuthentication/EnableWebSignInForPrimaryUser`** Data type: **Integer** Value: **1**|
+| OMA-URI: **`./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebSignInAllowedUrls`** Data type: **String** Value: Semicolon separated list of domains, for example: **`samlidp.clever.com;clever.com;mobile-redirector.clever.com`**|
+| OMA-URI: **`./Vendor/MSFT/Policy/Config/Education/IsEducationEnvironment`** Data type: **Integer** Value: **1**|
+| OMA-URI: **`./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebCamAccessDomainNames`** Data type: **String** Value: This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that re llowed to use the webcam during the sign-in process, separated by a semicolon. For example: **`clever.com`**|
+| OMA-URI: **`./Vendor/MSFT/SharedPC/EnableSharedPCMode`** Data type: **Boolean** Value: **False**|
+
---
## How to use federated sign-in