Try this >

- gpedit

Computer Configuration > Administrative Templates > Windows Components > Windows Logon Options > Configure the transmission of the user's password in the content of MPR notifications sent by winlogon.
and enable it

OR

- Manually creating the reg key:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
“EnableMPR"=dword:00000001

Yes it is working.

Ty

Stephane

You may want to make sure you have not disabled the ZCM Credential Provider.....The functionality of the above registry key is being deprecated by MS and could be fully removed at any time....though I do suspect it will be at least a year until the do so.

The registry key is working well for existing Win11 machines. After reboot SSO login works. But its not working for a fresh installation. I use a powershell installation script. I tried these two lines. After a fresh install EnableMPR ist not set. What can be  reason for this?

reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableMPR /t REG_DWORD /d 1 /f

or

New-ItemProperty -Path 'Registry::HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System' -Name 'EnableMPR' -PropertyType DWORD -Value '1' -Force

Using that registry key is not recommended.

#1 - MS Considers is a security vulnerability.

#2 - MS has announced that setting is deprecated and support for it will be removed in future versions.

#3 - It's not required for automatic ZENworks authentication.

--

Either ensure the ZENworks Credential Provider is Enabled and not disabled by another Credential Provider

or

Configure Kerberos which will allow for pass-through authentication from other providers

https://community.opentext.com/img/zenworks/w/tips/48827/zenworks-understanding-configuring-and-troubleshooting-kerberos-authentication

Generally speaking there are only advantages for Kerberos.

Note: The key above and registry setting needs to be in place at boot.  You may need a GPO to enforce it as well..