| author | MandiOhlinger |
|---|---|
| ms.topic | include |
| ms.date | 02/27/2024 |
| ms.author | mandia |
When you use the SSO app extension, you use the SSO or Kerberos Payload Type for authentication. The SSO app extension is designed to improve the sign-in experience for apps and websites that use these authentication methods.
The Microsoft Enterprise SSO plug-in uses the SSO Payload Type with Redirect authentication. The SSO Redirect and Kerberos extension types can both be used on a device at the same time. Be sure to create separate device profiles for each extension type you plan to use on your devices.
To determine the correct SSO extension type for your scenario, use the following table:
| Microsoft Enterprise SSO plug-in for Apple Devices | Single sign-on app extension with Kerberos |
|---|---|
| Uses the Microsoft Entra ID SSO app extension type | Uses the Kerberos SSO app extension type |
| Supports the following apps: - Microsoft 365 - Apps, websites or services integrated with Microsoft Entra ID |
Supports the following apps: - Apps, websites or services integrated with AD |