Entra Seamless SSO Not Working: A Read-First Intranet Zone, Kerberos Ticket, and AZUREADSSOACC Triage

Seamless SSO not working? Check PRT vs Kerberos, the intranet zone, klist, AZUREADSSOACC and the 2026 RC4-to-AES change before you reset anything.