Azure AD B2B External Identities SAML Wildcard for Domain

NickH48226 6 Reputation points
2022-05-22T16:45:35.267+00:00

Hello

I have guest users / b2b setup in my azure tenant but need to redirect all authentication for guest users to an on-prem saml IdP I have. I see you can federate individual domains, but is there a way to federate all with a wildcard? I have multiple public, private, other domains that I do not want to have to federate / maintain each separately since is a dynamic list. Is there a way to do this / add a wildcard of '*' or other to the domain?

Thanks

Nick

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,639 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,451 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AmanpreetSingh-MSFT 56,306 Reputation points
    2022-05-25T14:37:53.26+00:00

    Hi @NickH48226 • Thank you for reaching out.

    As per the product design, this is not possible. During the configuration, you need to specify the Passive authentication endpoint and the domain name in this endpoint should either exactly match the domain name or must share the same DNS Namespace e.g. if the domain name in the Passive authentication endpoint is login.example.com, the domain can be either login.example.com or example.com.

    However, if you don't own login.example.com or example.com domain, you will need to create a TXT record in your domain with DirectFedAuthUrl=https://login.example.com/<requiredparameters> value in your domain.

    That is why, in any case, you cannot specify a wildcard character.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.