...
In addition, the Office 365 application set up in your DualShield server must have 2 logon procedures, one for Web SSO and the other for Enhanced Client (ECP)
The logon procedure for ECP Enhanced Client must have one logon step with "Static Password" as its authentication method
...