Single Sign-On Mac and iPads?

Are you using JAMF Connect or PSSO?

If you’re using either one of those with MS Entra, then having a TGT (via company portal) for that user and using the SSOe, you can specify the domains that respond to SSO in the plist for the SSOe. Are you wanting to use kerb for on prem bindings?  Would also be curious of your use case of binding to on prem AD as well…
 

If none of what I said is making sense, then check out this document from MS. You may have to filter for JAMF: https://learn.microsoft.com/en-us/intune/device-configuration/templates/configure-enterprise-sso-plugin-macos?tabs=prereq-jamf-pro%2Ccreate-profile-intune

We don’t use either Jamf Connect or PSSO.

Then you’re going to be extremely hard pressed to get SSO working.  The primary thing is to have a validated IdP to provide to the SSOe.  

What is your IdP?

For iPads see this article:

https://learn.jamf.com/r/en-US/jamf-setup-reset-configuration-guide/Overview