Skip to main content

Configure Windows devices to use Skolon Pass - Knowledgebase / Implementation guide / Integrations - Skolon Support

Configure Windows devices to use Skolon Pass

Authors list

In this article you’ll learn the steps to configure your inTune enrolled Windows devices to use Skolon Pass (QR-codes) as a sign-in method.

Before proceeding with the configuration, make sure you have followed the steps described in the article Install Skolon as an external Identity Provider (IDP) to Entra

Prerequisites

Microsoft only supports the use of an external IdP for the following Windows devices:

  • Windows 11 Pro Education/SE or

  • Windows 11 Education licences.

To be able to use federated sign-in, users must have some of the following licences in Entra:

  • Windows Pro Education/SE,

  • Windows Education A3,

  • Windows Education A5

To configure Skolon as an IdP for Entra ID, the following prerequisites must be met in Entra:

  • InTune Admin access for administrators to configure and manage devices.

  • Intune licences for all users who will use federated logins (Auto-enrollment requires Microsoft Intune Plan 1; licence type depends on your needs).

Configuration in Intune Admin Center

To configure inTune enrolled devices to use a federated login, follow the instructions as described in Microsofts support article “Configure federated sign-in for Windows devices”.

Use the following settings when configuring the devices:

Category

Setting name

Value

Education

Is Education Environment

Enabled

SharedPC

Enable Shared PC Mode With OneDrive Sync

True

Authentication

Enable Web Sign In

Enabled

Authentication

Configure Web Sign In Allowed Urls

Enter the list of domains, with each URL in a separate row. For example:

- saml-idp.skolon.com

- app.skolon.com

- ext-idp.skolon.com

- skolon.com

- ORGANIZATION.saml-idp.skolon.com

Note that this value is given to you by your Skolon rep.

Authentication

Configure Webcam Access Domain Names

This setting is optional, and it should be configured if you need to use the webcam during the sign-in process. Specify the list of domains that are allowed to use the webcam during the sign-in process, separated by a semicolon.

app.skolon.com

For advanced troubleshooting, please see the article Troubleshooting Skolon QR-Code SSO for Windows Devices

Yes, this tcket was helpful. No, this article was unhelpful.