ExtensibleEnterpriseSSOBlocklist

Disable single sign-on using Extensible Enterprise SSO for the listed identity providers. By adding the value 'all', all supported identity providers for SSO are disabled. By adding the value 'microsoft', support for single sign-on for Microsoft® cloud identity provider in Chrome is disabled. By leaving this policy unset, all identity providers that are supported by Google Chrome will be enabled. For identity providers that are enabled in Google Chrome and configured on the device the administrator, users who sign into their once using that identity provider, on any application that supports Extensible Enterprise SSO, can be signed into web properties using that identity provider automatically. Information pertaining to the user's authencitation information is transmitted to the user's cloud identity provider for each authentication event. Notes: Google Chrome does not support Single Sign-on using Extensible Enterprise SSO in Incognito or Guest modes. Google Chrome only supports Single Sign-on using Extensible Enterprise SSO for the following identity providers: Microsoft. This feature is available starting in macOS 10.15.