How can I setup an Azure SSO web application such that users can access the application by providing their User ID and Password instead of using the SSO login flow?

Question

How can I setup an Azure SSO web application such that users can access the application by providing their User ID and Password instead of using the SSO login flow?

Sunil Ferro 21

We have a web application that is configured for single sign-on with SAML in Azure. There are users (employees) setup in the Active Directory however there are other users (contractors) who are not in the Active Directory and we need to give them the ability to sign in to the application as well. Is it possible to setup the SSO web application such that users can sign in using their traditional login credentials (User ID, Password) if they do not want to use SSO?

Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2024-04-18T04:26:33.7333333+00:00

@Sunil Ferro

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.
Sunil Ferro 21 Reputation points

2024-04-23T10:50:09.2733333+00:00

I replied to your answer and added some detail. With the SAML application, we can exclude certain pages from SSO authentication by making changes in the web.config. We can exclude the application's default Login page as well however when the user enters his credentials on the Login page and clicks on Login, he will run into the SSO page again. The objective is that both SSO and non SSO users (users not in the AD), should be able to access the same application. How can this be achieved?

4 answers

Your answer

Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2024-04-18T04:26:33.7333333+00:00

@Sunil Ferro

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.
Sunil Ferro 21 Reputation points

2024-04-23T10:50:09.2733333+00:00

I replied to your answer and added some detail. With the SAML application, we can exclude certain pages from SSO authentication by making changes in the web.config. We can exclude the application's default Login page as well however when the user enters his credentials on the Login page and clicks on Login, he will run into the SSO page again. The objective is that both SSO and non SSO users (users not in the AD), should be able to access the same application. How can this be achieved?

Answer 1

Sandeep G-MSFT 20,906 Microsoft Employee Moderator

@Sunil Ferro

Thank you for posting this in Microsoft Q&A.

As I understand you have an SAML application configured in Azure AD. And you want users to be prompted for credentials whenever they try to access the application. Basically, you doesn't want SSO to work for users whoever tries to access this application.

To require users to be prompted for credentials every time they access the application, you need to update your application code to include forceAuthn="true" parameter in the authentication request. This is an SAML parameter that forces interactive authentication regardless of whether a valid PRT and/or Cookies are present or not.

Read more: https://learn.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Sunil Ferro 21 Reputation points

2024-04-18T07:34:45.4866667+00:00
Hi Sandeep,

Currently when we access our application URL, we get the SSO page. User enters his email id and password (set in AD) and signs in.

Instead of the SSO page, can we display our application's Login page (image below) as the default page so that users who are not in the AD can login using their application Username and Password?

For users who are in AD, they can click on the 'Sign in with SSO' button (mock-up in image below) that will take them to the SSO page (step 1).

This will give the option for users to either use their Username and Password to login or click on the SSO button to go through the SSO process (step 1).

Can this be achieved? I think the "forceAuthn="true" parameter option will apply to all users but we don't want to change the sign in process for SSO users who are in the AD.

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 3

Royala Jhonson 0

To set up an Azure AD (Azure Active Directory) Single Sign-On (SSO) web application so that users can log in using their User ID and Password instead of using the sso id rajasthan flow, you typically need to configure Azure AD with a "Non-gallery application" and then handle authentication within your application itself. F

Answer 4

umran Jammu 0

An SSO ID (Single Sign-On Identification) in Rajasthan is a unique digital identity provided by the Government of Rajasthan. It enables residents, businesses, and government employees to access a wide range of state government services through a single online platform, eliminating the need for multiple usernames and passwords.

Share via

How can I setup an Azure SSO web application such that users can access the application by providing their User ID and Password instead of using the SSO login flow?

4 answers

Your answer