When configuring the Intranet Zone via Group Policy for users to support Azure AD SSO, which GPO setting should you configure?

The "Allow updates to status bar via script" Group Policy setting is crucial for Azure AD SSO when using the Intranet Zone because it enables JavaScript to interact with the browser's status bar. Azure AD SSO, particularly seamless SSO, relies on JavaScript to perform various authentication steps, including silently signing users in. If this setting is disabled, these scripts may not execute correctly, preventing the seamless SSO experience. "Logon options" is a broad category and not a specific setting for this purpose. "Allow active scripting" is a more general setting that is usually enabled by default in the Intranet Zone and, while necessary for many web functions, isn't the specific setting that directly impacts the status bar interaction required by Azure AD SSO. "Access data sources across domains" relates to cross-domain data access, which is a different security consideration and not directly tied to the status bar interaction for SSO.