The ‘annoying’ new SSO permission prompt in Windows 11 (or one of the installed apps) can be blocked by editing IntegratedServicesRegionPolicySet.json.
To make this easier for my fellow admins, here’s a script to automate this through e.g. Intune (run in SYSTEM context!)
https://github.com/jflieben/assortedFunctionsV2/blob/main/block-W11EntraSSOPrompt.ps1