My aim is to acquire silently an Azure AD token from a Domain joined workstation whose domain is connected to Azure AD through Azure AD Connect.
In order to do that I've built the following scenario:
- I configured a Windows Server and an Active Domain on it
- I connected the Active Domain to Azure AD using Azure AD Connect
- I configured the Seamless Sign-On: in fact, if I use a web-browser from a domain joined machine to navigate to the url https://myapps.microsoft.com/my_azure_domain.onmicrosoft.comI'm logged in correctly without user interaction
- If I use this example in order to obtain an Azure AD JWT Token interactively from a domain joined workstation (using the Textual Prompt) everything works fine
- If I use the same example in order to obtain an Azure AD JWT Token silently from a domain joined workstation (using the Windows-integrated security - UserCredential) I obtain the following error:
Inner Exception : password_required_for_managed_user: Password is required for managed user
What am I missing?
Thanks,
#azure