diff --git a/education/windows/federated-sign-in.md b/education/windows/federated-sign-in.md
index 3ce37431dc..3d25ae0bf4 100644
--- a/education/windows/federated-sign-in.md
+++ b/education/windows/federated-sign-in.md
@@ -53,11 +53,18 @@ To configure federated sign-in using Microsoft Intune, [create a custom profile]
|
OMA-URI: **`./Vendor/MSFT/Policy/Config/Education/IsEducationEnvironment`** Data type: **Integer** Value: **1**|
| OMA-URI: **`./Vendor/MSFT/Policy/Config/Authentication/ConfigureWebCamAccessDomainNames`** Data type: **String** Value: This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that re llowed to use the webcam during the sign-in process, separated by a semicolon. For example: **`clever.com`**|
| OMA-URI: **`./Vendor/MSFT/SharedPC/EnableSharedPCMode`** Data type: **Boolean** Value: **False**|
+|```OMA-URI
+ ./Vendor/MSFT/Policy/Config/FederatedAuthentication/EnableWebSignInForPrimaryUser
+```|
:::image type="content" source="images/federated-authentication-settings-intune.png" alt-text="Custom policy showing the settings to be configured to enable federated sign-in" lightbox="images/edu-federated-authentication-settings.png" border="true":::
Assign the policy to a security group that contains as members the devices that require federated sign-in.
+```OMA-URI
+ ./Vendor/MSFT/Policy/Config/FederatedAuthentication/EnableWebSignInForPrimaryUser
+```
+
#### [:::image type="icon" source="images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg)
To configure federated sign-in using a provisioning package, use the following settings: