i have multiple apps that use the same entity ID

Question

i have multiple apps that use the same entity ID

BH 20

i have an service that has 3 environments, dev, preview, prod. i am trying to setup saml /sso on each, but they all use the same (assertion) entity ID. i realize the azure limitation of needing each to be unique per federation/tenant. how can i work around this?

Accepted answer

0 additional answers

Your answer

Answer 1

Kancharla Saiteja 5,485 Microsoft External Staff Moderator

Hi @BH,

Based on your query, you would like to use same entity ID for multiple instances of same application.

Entra ID would like to have a unique entity ID for all the applications to make sure there is no authentication loops or issues with application recognition while performing the authentication. When you have same entity ID for all the application, there will be an issue with identification of the application and will not be able to proceed with authentication at any point of time. This is the reason Entra make sures to have unique entity ID provided by the application for each application object entries. In order to configure these applications, you need to make sure to have different Entity ID for each instance of the application.

But if you would like to use multiple identifiers (Entity ID) but would like to have same audience for all the three instances of the application, you can use audience override for the claims of the application. This helps you in having same audience value for three applications when you retrieve a token for your application, here is the Microsoft document which would help you in performing the same: Configure app multi-instancing.

If you are using IDP initiated SSO with Entra, here are the steps you can follow:

Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
Browse to Identity > Applications > Enterprise applications.
Open any SSO enabled enterprise app and navigate to the SAML single sign-on blade.
Select Edit on the User Attributes & Claims panel.
Select Edit to open the advanced options blade.
Configure both options according to your preferences and then select Save

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly "upvote it". If you have extra questions about this answer, please click "Comment".

BH 20 Reputation points

2025-04-14T19:47:16.3533333+00:00

no this doesnt work. i cant put a second app with the same entity ID, it gives me this error:

Please enter an identifier which is unique within your organization. Search in Enterprise applications and App registrations for "app name", which currently uses this identifier.
Kancharla Saiteja 5,485 Reputation points Microsoft External Staff Moderator

2025-04-14T19:55:43.5133333+00:00

Hi @BH,

Yes, you cannot add same entity ID for two different applications, this definitely throws an error. What I have suggested is to make audience claim override, which make sure the three applications tokens will have same audience value in token. This is suggested as the three applications belongs to one application service tree, so that you can have same audience value.

but you cannot add same entity ID to multiple applications, which is by design and cannot be modified. You can provide your feedback in our feedback forum: Azure feedback forum

If the answer is helpful, please click "Accept Answer" and kindly "upvote it". If you have extra questions about this answer, please click "Comment"
Kancharla Saiteja 5,485 Reputation points Microsoft External Staff Moderator

2025-04-15T16:49:13.4333333+00:00

Hi @BH,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
BH 20 Reputation points

2025-04-15T19:03:25.11+00:00

can we do a screen share do you can show me? i dont follow
Kancharla Saiteja 5,485 Reputation points Microsoft External Staff Moderator

2025-04-15T19:06:19.88+00:00

Hi @BH,

Could you please check your private messages and respond accordingly.

Share via

i have multiple apps that use the same entity ID

0 additional answers

Your answer