Enabling Windows SSO in Firefox using Intune

Windows Single Sign-On (SSO) in Firefox allows users to seamlessly log in to Microsoft, work, and school accounts using credentials already stored in their Windows 10 or 11 operating system. This feature reduces repeated authentication prompts and enhances productivity, especially in enterprise environments.

Prerequisites

You need to ensure the following prerequisites are met before enabling Windows SSO in Firefox,

  • Operating System: Windows 10 or Windows 11.
  • Firefox Version: Version 91 or newer.
  • Accounts: Microsoft, work, or school accounts linked to Windows.
  • Administrative Rights: Required if deploying via Intune or Group Policy.

Step-by-Step Guide: Enable Windows Single Sign-on in Firefox

Manually Configure SSO on a Device

You can manually configure SSO in Mozilla Firefox by following the steps below. This is useful when your organization has not configured SSO for Firefox, and you want to enable that. Please note that you will not be able to change this option if your organization has enabled or disabled Windows SSO for Firefox through Microsoft Intune or Group Policies.

  • Open Firefox.
  • Click the menu button (≡) located at the top-right corner of the browser window.
  • Select Settings from the dropdown menu.
  • Navigate to the Privacy & Security panel on the left sidebar.
  • Scroll down to the Logins and Passwords section.
  • Check the box next to Allow Windows single sign-on for Microsoft, work, and school accounts to enable the feature.
  • Close the settings tab.
  • Restart Firefox to apply the changes and ensure the SSO feature is active.

Enable Windows SSO in Firefox

Configure Windows SSO in Firefox using Intune

Follow the steps below to configure Windows SSO in Firefox for managed devices using Microsoft Intune.

Step 1: Download and Import Firefox AMDX templates

Download the latest Firefox ADMX templates from the official Mozilla website, and Import ADMX files to Microsoft Intune.

Import Forefpx ADMX in Intune

Step 2: Create Configuration Profile

  • Open the Intune Admin Portal and navigate to Devices > Windows > Configuration profiles.
  • Click Create profile and select Windows 10 and later as the platform.
  • Choose Templates > Imported Administrative Templates (Preview) to create a new policy.
  • Provide an appropriate name & description for the policy and click on Next to create the profile.

 Imported Administrative Templates (Preview)

Step 3: Add Firefox Setting Catalog

  • In the profile wizard, click Add settings.
  • Search for Firefox (appears after ADMX import).
  • Search for Windows SSO and select the policy Windows SSO from the results.
  • Select Enabled and click on Ok to turn on the settings.
  • Select Next.

Mozilla Firefox Windows SSO Setting catalog in Intune

Step 4: Assign the Profile

Assign the profile to the target All Devices, All users, Entra ID groups. You can also use Assignment filters for granular targeting of the deployment.

Monitor deployment status and troubleshoot any issues via Intune reporting tools.

End User Experience

Once Windows SSO is enabled in Firefox:

  • Users accessing Microsoft 365 services such as Outlook, Teams, and SharePoint will be automatically signed in using their Windows credentials.
  • Users will no longer be prompted repeatedly for usernames and passwords, streamlining access.
  • This seamless authentication improves productivity and reduces login friction in enterprise environments.

Open Firefox on the device and follow the steps provided earlier in “Manually configure SSO on Windows 10/11. You can notice that the “Allow Windows Single Sign-on for Microsoft, work, and school accounts” option is now enabled and grayed out. The policy is now applied through Intune, and users won’t be able to change the settings.

Allow Windows Single Sign-on for Microsoft, work, and school accounts

Conclusion

Enabling Windows SSO in Firefox streamlines authentication for Microsoft, work, and school accounts, improving user experience and reducing repetitive logins. Whether configured manually or deployed via Intune, this feature is a valuable addition for both individual users and enterprise environments, enhancing security and productivity.

Frequently Asked Questions (FAQs)

Which Firefox versions support Windows SSO?

Firefox version 91 and newer support this feature.

Does this work on macOS or Linux?

No, Windows SSO is exclusive to Windows 10 and Windows 11 operating systems.

Can administrators enforce this setting?

Yes, administrators can enforce Windows SSO using Intune or Group Policy with the ADMX templates.

What types of accounts are supported?

Microsoft, work, and school accounts that are linked to Windows credentials.

Is a browser extension required?

No, the Windows SSO feature is built directly into Firefox and does not require any extensions.

Related Posts


Subscribe to Techuisitive Newsletter

Be the first to know about our new blog posts. Get our newsletters directly in your inbox and stay up to date about Modern Desktop Management technologies & news.

Scroll to Top