SAML in Azure AD - refresh config from SP metadata URL

Thomas Higgins 6 Reputation points
2022-06-07T21:57:14.497+00:00

Currently we have 40-50 or so Relying Party Trusts setup on our on-prem hosted ADFS, we want to transfer these to Azure AD. Seems easy enough to me, essentially copy/paste the config/claims in a custom Enterprise App and have the 3rd party swap their end. Done it a few times thus far, works well enough. We really want to leverage all the benefits Azure AD has (conditional access policies etc etc).

HOWEVER

ADFS has a lovely feature where I can pop in the Service Providers metadata URL and check the "Automatically update relying party" checkbox. This means that if the 3rd party ever modifies their identifiers, urls, certificates etc, ADFS will update itself. Azure AD doesn't seem to have that option that I can see? I can upload the metadata, but I cannot seem to find the option to update automatically from a metadata url. Am I blind? Does this option exist? Am I solving this issue in the wrong way?

Thanks for the help!

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Thomas Higgins 6 Reputation points
    2022-06-08T07:35:07.513+00:00

    Move application authentication to Azure Active Directory - Map app settings from AD FS to Azure AD

    N/A. Azure AD doesn't support consuming application federation metadata directly. You can manually import the federation metadata.

    My question was answered somewhere else - unfortunately it looks like it is not supported. That's very disappointing.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.