Chrome Web Store
10Versions
1Code reviewed

No malware found

In code review (v1.0.10)

Our reviewer read version 1.0.10 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Microsoft Single Sign On, used by 36,000,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in August 2024.

This is the legitimate Microsoft Single Sign-On extension (published by Microsoft Corporation, Google trusted publisher badge confirmed). The code is minimal and clean: establishes a postMessage channel (keyed on a fixed GUID) to bridge page-level SSO requests to the service worker, and forwards those requests to the native host 'com.microsoft.browsercore' — the standard Microsoft SSO broker. No data exfiltration, no obfuscation, no remote code loading. The ML score of 0.00 is already low; the risk-engine 'medium' rating is driven entirely by nativeMessaging and document_start execution, both of which are inherent to this extension's core SSO function.

Microsoft Single Sign On

Microsoft Single Sign On

ID: ppnbnpeolgkicgegkbkbjmhlideopiji

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.0.11
Size
0.01 MB
Rating
2.2/5
Reviews
993
Users
36,000,000
Type
Extension
Updated
Aug 1, 2024
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
10extensions
2 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
MicrosoftView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
10
Active
6
Obsolete
2
Listed
9
Unlisted
1
Users
38,230,680

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Sign in to supported websites with your Microsoft work or school accounts on Windows and macOS platforms.

Read the publisher’s full description

Use this extension to sign in to supported websites with Microsoft work or school accounts on Windows (10 and later versions) or macOS (11 and later versions). If you have a Microsoft Entra ID on your Windows or macOS computer, this extension enables improved Single Sign On for supported websites. You may still see additional authentication prompts like multi-factor verification depending on the access requirements for various applications, resources, and organizations. This extension is required for certain device-based conditional access policies for Microsoft Entra ID. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-conditions#supported-browsers For macOS, this extension requires the device to be managed and requires the additional installation of Company Portal: https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-your-device-in-intune-macos-cp Note: If you are experiencing difficulties with signing in or accessing resources, it could be related to your organization’s device policies. Please submit a support ticket directly to Microsoft through your tenant’s subscription. The developer email address for the extension is not an avenue for customer support.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
2

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Showing 1 to 10 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from Microsoft