{"id":150,"date":"2023-05-16T10:37:29","date_gmt":"2023-05-16T02:37:29","guid":{"rendered":"https:\/\/www.ruianding.com\/blog\/?p=150"},"modified":"2023-08-31T01:50:26","modified_gmt":"2023-08-30T17:50:26","slug":"configuration-of-browsers-to-allow-ms-account-sso","status":"publish","type":"post","link":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/","title":{"rendered":"Configuration of Mainstream Browsers to Allow AAD SSO"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\" id=\"1-overview\">Overview<\/h2>\n\n\n\n<p>When we configure the&nbsp;<strong>Device Based Conditional Access Policies<\/strong>&nbsp;(e.g. Devices that required Hybrid Azure AD Join to access certain online resources), device registration is a definitely a necessary prerequisite. However, we still need to successfully obtain the other factor called&nbsp;<strong><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/devices\/concept-primary-refresh-token\" target=\"_blank\" rel=\"noreferrer noopener\">Azure AD Primary Refresh Token (Azure AD PRT)<\/a><\/strong>. Only after the Azure AD PRT (which contains device information) is successfully obtained by the device, we can ensure that the device based conditional access policies can be successfully passed.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png\" alt=\"\" class=\"wp-image-194\" width=\"640\" height=\"296\"\/><\/figure>\n\n\n\n<p>Browsers are used when we visit some web resources, but not all browsers support reading the Azure AD PRT by default.&nbsp;<strong>The following is the configuration of the three mainstream browsers to read Azure AD PRT.<\/strong><\/p>\n\n\n\n<p>The full supported browser list could be found on this documentation: <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/conditional-access\/concept-conditional-access-conditions#chrome-support\" target=\"_blank\" rel=\"noreferrer noopener\">Conditions in Conditional Access policy &#8211; Microsoft Entra | Microsoft Learn<\/a><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"897\" height=\"321\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-83.png\" alt=\"\" class=\"wp-image-253\"\/><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"2-configuration-of-mainstream-browsers\">1. Configuration of Mainstream Browsers<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"21-microsoft-edge\">1.1 Microsoft Edge<\/h3>\n\n\n\n<p>Generally, after the device was successfully registered to Azure AD, it will be automatically sign-in the Edge.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-45.png\" alt=\"\" class=\"wp-image-196\" width=\"205\" height=\"165\"\/><\/figure>\n\n\n\n<p>As above, if there is no signed-in user, we cannot pass the Device Based Conditional Access Policies (Not specify the logon user&#8217;s Azure AD PRT). We can click&nbsp;<strong>Sign in to sync data<\/strong>&nbsp;to do a login process.<\/p>\n\n\n\n<p>This documentation explained why we need a sign-in the profile in order to let the Edge read the PRT:<\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/deployedge\/ms-edge-security-conditional-access#accessing-conditional-access-protected-resources-in-microsoft-edge\">Microsoft Edge and Conditional Access | Microsoft Learn<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"22-google-chrome\">1.2 Google Chrome<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>1.2.1 Installation<\/strong><\/h4>\n\n\n\n<p>We need to install an extension called&nbsp;<strong>Windows Accounts<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-47.png\" alt=\"\" class=\"wp-image-198\" width=\"655\" height=\"433\"\/><\/figure>\n\n\n\n<p>Google Chrome can also support Incognito Window SSO, after enable the below settings&nbsp;<strong>(Only Google Chrome with Windows Accounts Extension)<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-48.png\" alt=\"\" class=\"wp-image-200\" width=\"410\" height=\"476\"\/><\/figure>\n\n\n\n<p style=\"font-size:14px\">Notes: The reason why Windows account extension can be used in Incognito mode is due to Google itself having a setting that allows loading extensions in Incognito mode.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>1.2.2 Deep Dive<\/strong><\/h4>\n\n\n\n<p>You may have noticed that the full list of supported browsers does not include Windows Server 2016. This is because the SSO extension is only compatible with Windows 10 Creators Update (version 1703) or later operating systems.<\/p>\n\n\n\n<p>The reason for this limitation is that SSO requires a built-in executable file called BrowserCore.exe, which serves as the communication link between Chrome and the SSO artifact. If BrowserCore.exe is not running or Chrome is unable to establish contact with it, SSO and CA (Conditional Access) will not function properly.<\/p>\n\n\n\n<p>Depending on the Windows version, BrowserCore.exe can be found in either of the following locations:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>C:\\Program Files\\Windows Security\\BrowserCore\\<\/li>\n\n\n\n<li>C:\\Windows\\BrowserCore\\<\/li>\n<\/ol>\n\n\n\n<p>Therefore, in the case of Windows Server 2016, SSO via Chrome and the SSO extension is not supported since the necessary BrowserCore.exe is not embedded in the system image.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"23-mozilla-firefox\"><strong>1.3 Mozilla Firefox<\/strong><\/h3>\n\n\n\n<p>We can go to&nbsp;<strong>Settings<\/strong>&nbsp;&gt;&nbsp;<strong>Privacy &amp; Security<\/strong>&nbsp;&gt;&nbsp;<strong>Enable Allow Windows SSO for Microsoft, work, and school accounts<\/strong>&nbsp;to allow Firefox to read the Azure AD PRT.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-49.png\" alt=\"\" class=\"wp-image-202\" width=\"652\" height=\"449\"\/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Overview When we configure the&nbsp;Device Based Conditional Access Policies&nbsp;(e.g. Devices that required Hybrid Azure AD Join to access certain online resources), device registration is a definitely a necessary prerequisite. However, we still need to successfully obtain the other factor called&nbsp;Azure AD Primary Refresh Token (Azure AD PRT). Only after the Azure AD PRT (which contains [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[31,36,10,40],"tags":[6],"class_list":["post-150","post","type-post","status-publish","format-standard","hentry","category-azuretopics","category-drs","category-tutorial","category-drs-windows","tag-drs"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Configuration of Mainstream Browsers to Allow AAD SSO - \u6781\u7b80IT\uff5cSimpleIT<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configuration of Mainstream Browsers to Allow AAD SSO - \u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"og:description\" content=\"Overview When we configure the&nbsp;Device Based Conditional Access Policies&nbsp;(e.g. Devices that required Hybrid Azure AD Join to access certain online resources), device registration is a definitely a necessary prerequisite. However, we still need to successfully obtain the other factor called&nbsp;Azure AD Primary Refresh Token (Azure AD PRT). Only after the Azure AD PRT (which contains [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/\" \/>\n<meta property=\"og:site_name\" content=\"\u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-16T02:37:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-30T17:50:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png\" \/>\n<meta name=\"author\" content=\"Ruian Ding\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ruian Ding\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/\"},\"author\":{\"name\":\"Ruian Ding\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"headline\":\"Configuration of Mainstream Browsers to Allow AAD SSO\",\"datePublished\":\"2023-05-16T02:37:29+00:00\",\"dateModified\":\"2023-08-30T17:50:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/\"},\"wordCount\":481,\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png\",\"keywords\":[\"DRS\"],\"articleSection\":[\"Azure Topics\",\"DRS\",\"Tutorial\",\"Windows\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/\",\"name\":\"Configuration of Mainstream Browsers to Allow AAD SSO - \u6781\u7b80IT\uff5cSimpleIT\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png\",\"datePublished\":\"2023-05-16T02:37:29+00:00\",\"dateModified\":\"2023-08-30T17:50:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png\",\"width\":760,\"height\":351},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.ruianding.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Configuration of Mainstream Browsers to Allow AAD SSO\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\",\"url\":\"https:\/\/www.ruianding.com\/blog\/\",\"name\":\"Ruian's Tech Troubleshooting Toolbox\",\"description\":\"Debug the World.\",\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"alternateName\":\"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\",\"name\":\"Ruian Ding\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"width\":284,\"height\":284,\"caption\":\"Ruian Ding\"},\"logo\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.\",\"sameAs\":[\"https:\/\/www.ruianding.com\"],\"url\":\"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configuration of Mainstream Browsers to Allow AAD SSO - \u6781\u7b80IT\uff5cSimpleIT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/","og_locale":"en_US","og_type":"article","og_title":"Configuration of Mainstream Browsers to Allow AAD SSO - \u6781\u7b80IT\uff5cSimpleIT","og_description":"Overview When we configure the&nbsp;Device Based Conditional Access Policies&nbsp;(e.g. Devices that required Hybrid Azure AD Join to access certain online resources), device registration is a definitely a necessary prerequisite. However, we still need to successfully obtain the other factor called&nbsp;Azure AD Primary Refresh Token (Azure AD PRT). Only after the Azure AD PRT (which contains [&hellip;]","og_url":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/","og_site_name":"\u6781\u7b80IT\uff5cSimpleIT","article_published_time":"2023-05-16T02:37:29+00:00","article_modified_time":"2023-08-30T17:50:26+00:00","og_image":[{"url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png","type":"","width":"","height":""}],"author":"Ruian Ding","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ruian Ding","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#article","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/"},"author":{"name":"Ruian Ding","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"headline":"Configuration of Mainstream Browsers to Allow AAD SSO","datePublished":"2023-05-16T02:37:29+00:00","dateModified":"2023-08-30T17:50:26+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/"},"wordCount":481,"publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png","keywords":["DRS"],"articleSection":["Azure Topics","DRS","Tutorial","Windows"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/","url":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/","name":"Configuration of Mainstream Browsers to Allow AAD SSO - \u6781\u7b80IT\uff5cSimpleIT","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png","datePublished":"2023-05-16T02:37:29+00:00","dateModified":"2023-08-30T17:50:26+00:00","breadcrumb":{"@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#primaryimage","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/image-44.png","width":760,"height":351},{"@type":"BreadcrumbList","@id":"https:\/\/www.ruianding.com\/blog\/configuration-of-browsers-to-allow-ms-account-sso\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ruianding.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Configuration of Mainstream Browsers to Allow AAD SSO"}]},{"@type":"WebSite","@id":"https:\/\/www.ruianding.com\/blog\/#website","url":"https:\/\/www.ruianding.com\/blog\/","name":"Ruian's Tech Troubleshooting Toolbox","description":"Debug the World.","publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"alternateName":"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b","name":"Ruian Ding","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","width":284,"height":284,"caption":"Ruian Ding"},"logo":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/"},"description":"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.","sameAs":["https:\/\/www.ruianding.com"],"url":"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/comments?post=150"}],"version-history":[{"count":8,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/150\/revisions"}],"predecessor-version":[{"id":931,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/150\/revisions\/931"}],"wp:attachment":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/media?parent=150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/categories?post=150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/tags?post=150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}