Windows Single Sign-On (SSO) in Firefox allows users to seamlessly log in to Microsoft, work, and school accounts using credentials already stored in their Windows 10 or 11 operating system. This feature reduces repeated authentication prompts and enhances productivity, especially in enterprise environments.
Prerequisites
You need to ensure the following prerequisites are met before enabling Windows SSO in Firefox,
- Operating System: Windows 10 or Windows 11.
- Firefox Version: Version 91 or newer.
- Accounts: Microsoft, work, or school accounts linked to Windows.
- Administrative Rights: Required if deploying via Intune or Group Policy.
Step-by-Step Guide: Enable Windows Single Sign-on in Firefox
Manually Configure SSO on a Device
You can manually configure SSO in Mozilla Firefox by following the steps below. This is useful when your organization has not configured SSO for Firefox, and you want to enable that. Please note that you will not be able to change this option if your organization has enabled or disabled Windows SSO for Firefox through Microsoft Intune or Group Policies.
- Open Firefox.
- Click the menu button (≡) located at the top-right corner of the browser window.
- Select Settings from the dropdown menu.
- Navigate to the Privacy & Security panel on the left sidebar.
- Scroll down to the Logins and Passwords section.
- Check the box next to Allow Windows single sign-on for Microsoft, work, and school accounts to enable the feature.
- Close the settings tab.
- Restart Firefox to apply the changes and ensure the SSO feature is active.

Configure Windows SSO in Firefox using Intune
Follow the steps below to configure Windows SSO in Firefox for managed devices using Microsoft Intune.
Step 1: Download and Import Firefox AMDX templates
Download the latest Firefox ADMX templates from the official Mozilla website, and Import ADMX files to Microsoft Intune.

Step 2: Create Configuration Profile
- Open the Intune Admin Portal and navigate to Devices > Windows > Configuration profiles.
- Click Create profile and select Windows 10 and later as the platform.
- Choose Templates > Imported Administrative Templates (Preview) to create a new policy.
- Provide an appropriate name & description for the policy and click on Next to create the profile.

Step 3: Add Firefox Setting Catalog
- In the profile wizard, click Add settings.
- Search for Firefox (appears after ADMX import).
- Search for Windows SSO and select the policy Windows SSO from the results.
- Select Enabled and click on Ok to turn on the settings.
- Select Next.

Step 4: Assign the Profile
Assign the profile to the target All Devices, All users, Entra ID groups. You can also use Assignment filters for granular targeting of the deployment.
Monitor deployment status and troubleshoot any issues via Intune reporting tools.
End User Experience
Once Windows SSO is enabled in Firefox:
- Users accessing Microsoft 365 services such as Outlook, Teams, and SharePoint will be automatically signed in using their Windows credentials.
- Users will no longer be prompted repeatedly for usernames and passwords, streamlining access.
- This seamless authentication improves productivity and reduces login friction in enterprise environments.
Open Firefox on the device and follow the steps provided earlier in “Manually configure SSO on Windows 10/11. You can notice that the “Allow Windows Single Sign-on for Microsoft, work, and school accounts” option is now enabled and grayed out. The policy is now applied through Intune, and users won’t be able to change the settings.

Conclusion
Enabling Windows SSO in Firefox streamlines authentication for Microsoft, work, and school accounts, improving user experience and reducing repetitive logins. Whether configured manually or deployed via Intune, this feature is a valuable addition for both individual users and enterprise environments, enhancing security and productivity.
Frequently Asked Questions (FAQs)
Which Firefox versions support Windows SSO?
Firefox version 91 and newer support this feature.
Does this work on macOS or Linux?
No, Windows SSO is exclusive to Windows 10 and Windows 11 operating systems.
Can administrators enforce this setting?
Yes, administrators can enforce Windows SSO using Intune or Group Policy with the ADMX templates.
What types of accounts are supported?
Microsoft, work, and school accounts that are linked to Windows credentials.
Is a browser extension required?
No, the Windows SSO feature is built directly into Firefox and does not require any extensions.
Related Posts
- How to Allow Copilot in Microsoft Edge Using Intune
- Configure Microsoft Edge Sleeping Tabs using Microsoft Intune
- Manage Microsoft Edge Favorites with Intune for Windows 10/11
- How to Configure Edge Chromium Homepage & Startup Page Using Intune
- How to Configure Google Chrome settings using Administrative templates | Intune
- Enabling Azure Single Sign-On in Google Chrome with Intune: Don’t Miss This Key Setting
Subscribe to Techuisitive Newsletter
Be the first to know about our new blog posts. Get our newsletters directly in your inbox and stay up to date about Modern Desktop Management technologies & news.