I've already got a case logged with support about this, and frankly I'm left dumbstruck at what I'm being told.
To try and increase user adoption, we were looking to switch on the SSP. As we're a windows environment, it seemed logical to use our in Prem AD to provide authentication to the portal. It flat out won't work.
Support are saying that the *only* way it will work, is to wipe devices, re-enrol them using AD authentication to create the portal user login.
They've suggested using meraki authentication - However, as there's no way to bulk reset passwords, or have those passwords have a requirement to be changed at first logon, it could hardly be called an enterprise solution.