Enable the Single Sign-on API for the Office Add-in, so that logged in users are not required to log in again. This would improve the user experience and enable the add-in to work with Conditional Access rules for improved security.

Currently, when the user is prompted to log in again, that login has to meet Conditional Access rules and there is no mechanism to exempt the add-in or create a custom rule.

So for example, in a situation where a user is on an untrusted network and an access rule calls for a compliant device, the access will fail as the add-in does not pass device information when performing authentication.