Consolidate SaaS Applications to use Azure SSO

Question

Hello I have a scenario where multiple divisions in a company use 3rd party SaaS applications such as Salesforce. These SaaS applications use a third party identity provider for example Google to have the users login.

Because there are various departments all using these applications independently across various divisions, what we are trying to do is to change the identity provider to Azure SSO. Where one Azure tenant is responsible for logging in the user for all the applications.

Example:

Division A uses SaaS Saleforce and Google as the Identity Provider

Division B uses SaaS Salesforce and Google as the Identity Provider

Is it possible to have Division A and B uses the same Azure tenant to login into Salesforce, instead of Google? Keeping in mind that both Salesforce applications are independent of one another. Meaning the config, database etc. is different in each division.

or

would it be a better idea to migrate the application itself into Azure and have everyone run the application directly from the Azure with different instances of the application?

Any guidance would be appreciated

Answer 1

@berketjune2012

Yes, this approach is possible. You can get Azure AD authenticate all users while accessing single application by multiple different departments, keeping applications independent of each other.

To achieve this you will have to configure salesforce application using multi-instancing.

App multi-instancing refers to the need for the configuration of multiple instances of the same application within a tenant. For example, the organization has multiple accounts, each of which needs a separate service principal to handle instance-specific claims mapping and roles assignment. Or the customer has multiple instances of an application, which doesn't need special claims mapping, but does need separate service principals for separate signing keys.

You can also refer below article to get more information.

https://learn.microsoft.com/en-us/azure/active-directory/develop/configure-app-multi-instancing

Let me know if you have any further questions on this.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.