We have configured single sign on and want users to login to salesforce through SSO when using the salesfrce mobile app. Users have installed the salesforce app on their mobile device and when they click the single sign on button, it asks users to 'To enroll your device, install the free Microsoft Intune Company Portal app'. However the Intune app is already installed by default for users in our org.
Has anyone else had this issue or something similar when trying to login to the salesforce mobile app and figured out a workaround?

Steps followed to reproduce:
Method 1 : Login with username and password (Salesforce credentials), works fine.
Method 2 : Go to Salesforce Mobile app
• Change the custom domain to company name, so we get the SSO button to appear on the mobile app and login through SSO
• When we click the SSO link, it redirects to Microsoft login page.
• Primary authentication is successful, and we are receiving an authentication notification on Microsoft Authenticator.
• On clicking on Approve, it re-directs to Play Store to install Microsoft Intune Company Portal.
• Microsoft InTune is already installed on the Mobile Devices.
• Devices tested : Windows 10 laptop, Android Mobile Device, Iphone.
We have tried the following:

• Deactivated Google Chrome on Android device, no luck with the default browser.
• Updated the InTune policies, no luck.
• Windows 10 device is updated with the latest sync policies, no luck.
• Checked the domain settings in salesforce to 'Use the native browser for user authentication on iOS and Android'. No luck.
• We raised it with our Microsoft team to investigate. They have indicated that it is an issue with the salesforce mobile app.

Any info would be much appreciated. 

thanks

Hi Everyone, 

we are trying to set up Single sign on between SF & Azure. We are connecting through our sandbox, however when we attempt to test the connection, we get the error message that states salesforce credentials unavailable. We have reset the passwords and security token however still experience the same issue.

Additionally, we have noticed when we attempt the provisioning to SF groups, that the Salesoforce custom profiles do not display in the AD console, only the standard profiles. Has anyone else come across this issue? 

thanks

We have configured single sign on and want users to login to salesforce through SSO when using the salesfrce mobile app. Users have installed the salesforce app on their mobile device and when they click the single sign on button, it asks users to 'To enroll your device, install the free Microsoft Intune Company Portal app'. However the Intune app is already installed by default for users in our org.
Has anyone else had this issue or something similar when trying to login to the salesforce mobile app and figured out a workaround?

Steps followed to reproduce:
Method 1 : Login with username and password (Salesforce credentials), works fine.
Method 2 : Go to Salesforce Mobile app
• Change the custom domain to company name, so we get the SSO button to appear on the mobile app and login through SSO
• When we click the SSO link, it redirects to Microsoft login page.
• Primary authentication is successful, and we are receiving an authentication notification on Microsoft Authenticator.
• On clicking on Approve, it re-directs to Play Store to install Microsoft Intune Company Portal.
• Microsoft InTune is already installed on the Mobile Devices.
• Devices tested : Windows 10 laptop, Android Mobile Device, Iphone.
We have tried the following:

• Deactivated Google Chrome on Android device, no luck with the default browser.
• Updated the InTune policies, no luck.
• Windows 10 device is updated with the latest sync policies, no luck.
• Checked the domain settings in salesforce to 'Use the native browser for user authentication on iOS and Android'. No luck.
• We raised it with our Microsoft team to investigate. They have indicated that it is an issue with the salesforce mobile app.

Any info would be much appreciated. 

thanks

We tried to set up single sign on in Azure AD. We followed all the steps from the tutorial
https://azure.microsoft.com/en-us/documentation/articles/active-directory-saas-salesforce-tutorial/.

In step 3, assigning users to the saleforce, we dont see the custom profiles from salesforce. We see only standard profiles.
We tried JIT user provisioning with standard type but still no custom profile is available in the azure ad side.

Does anyone know any fix for this? Thanks in advance