Currently, the user have to login manually in the intune agent, also when you enable SSO login for the client. Means the user have to login twice.Reduce to one, when the SSO entra ID token will be used also for the intune registration process