How to use microsoft-identity-broker?

[equaeghe]

My organization uses Microsoft for its SSO solution. I'm using Firefox and need to constantly go through the login process, specifically for MS services like Web Outlook and Office 365. So it is not really SSO for me. From some Googling, sys-auth/microsoft-identity-broker might provide a solution to me. However, documentation for Gentoo seems to not exist. I found https://github.com/siemens/linux-entra-sso[b][/b], but do not know if I need it or not.

Could someone tell me what I need to do to get this microsoft-identity-broker thing working on my system so that I don't have to constantly re-login in Firefox?

[Banana]

I can only suggest, yes you need microsoft-indentity-broker. More details here: https://learn.microsoft.com/en-us/intun ... vice-linux

The mentioned linx-entra-sso is only a helper to make the SSO login flow available for your browser.

[sMueggli]

My organization uses Microsoft for its SSO solution. I'm using Firefox and need to constantly go through the login process, specifically for MS services like Web Outlook and Office 365. So it is not really SSO for me.

What does "constantly" mean? Once a day? Every minute?

Do you use the same browser window for the logins or do you have several, independent browser windows? Are you deleting the cookies when closing the browser? Or do you use the private window functionality?

How is the SSO solution implemented? With SAML or some other protocol?

[equaeghe]

What does "constantly" mean? Once a day? Every minute?

Separately for different MS sites (Outlook, Planner, Office 365), while it always works for non-MS sites.

Do you use the same browser window for the logins or do you have several, independent browser windows? Are you deleting the cookies when closing the browser? Or do you use the private window functionality?

Different tabs, multiple browser windows, but it also just happens with one browser window. No deletion of cookies or private browsing, but using s specific container for work sites.

How is the SSO solution implemented? With SAML or some other protocol?

Not sure. It is the MS solution with MFA.

TBH, I'm really just interested in knowing how this microsoft-indentity-broker thing works. So ideally someone who uses it would provide some info.