Office 365 uses ADFS (Active Directory Federated Services) to log on users. ADFS isn’t true Single Sign-on, it’s more like SAML token based: The idea is, you visit a service provider (like Office365) and they redirect you to your organisation’s ADFS service to log on. Then you get directed back with an access token. Here