Listing all Enterprise Applications configured for Single Sign-On

Question

Listing all Enterprise Applications configured for Single Sign-On

Sam Hall 46

We have about 40-50 applications that we've configured with SSO. Mostly SAML. We've been relying on system administrators prefixing each Enterprise Application name so that we can actually find them in the large list. Is there a better way to find Enterprise Application we have created/configured, filtering out the Microsoft apps and all the 3rd party gallery templates?

Accepted answer

3 additional answers

Your answer

Answer 1

AmanpreetSingh-MSFT 56,871 Moderator

Hello @Sam Hall ,

In order to find SAML enabled applications in your tenant, you need to use below graph call:

Sign in to Graph Explorer using Application Administrator or Global Administrator account.
Run GET https://graph.microsoft.com/v1.0/servicePrincipals?$filter=preferredSingleSignOnMode eq 'saml'&$select=appDisplayName,preferredSingleSignOnMode call.
This will return all Application with SAML enabled. Please find below snip for your reference:

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Ali Fadavinia 0 Reputation points

2023-06-22T14:47:47.78+00:00

Works like a charm, thanks for sharing!
shashank singhal 0 Reputation points

2023-09-11T03:22:55.9+00:00

Hope this not too much of a noob question, but the Graph explorer mentioned here is the Resource Graph Explorer that in the Azure portal right?, because the query didn't work for me.
Or if it's a different Graph explorer, how do I login to it ?
Inder Singh 0 Reputation points

2025-02-05T19:06:55.08+00:00

This worked perfect!

Answer 2

Jesus Marin 1

Hi,

Might be obvious for you, but not for me, how can I get all the tags for applications, I'm trying to find applications that are configured as not visible to users

Answer 3

Dov Zelinger 1

That us very simple: just remove the "&$select=appDisplayName,preferredSingleSignOnMode" from the query and you will get all properties

Answer 4

To find applications in Azure/Microsoft Entra ID that are configured as not visible to users, you can follow these steps:

Sign in to the Microsoft Entra admin center with appropriate permissions (Cloud Application Administrator or Application Administrator).
Navigate to Identity > Applications > Enterprise applications > All applications.
In the application list, you can use the "Visible to users?" property to identify hidden applications. However, this property is not directly visible in the main list view.

To filter for hidden applications:

Select "Add filters" above the application list.
Choose "Application Visibility" as a filter option.
Set the filter to show applications where "Visible to users?" is set to "No".

Alternatively, you can use Azure AD PowerShell to find hidden applications:

powershell
Connect-AzureAD
Get-AzureADServicePrincipal -All $true | Where-Object {$_.Tags -contains "HideApp"}

This PowerShell command will retrieve all service principals (which represent applications) that have the "HideApp" tag.

Share via

Listing all Enterprise Applications configured for Single Sign-On

3 additional answers

Your answer