Is it possible to use multiple identity providers with Azure AD?

Timothy A. Dilbert 1 Reputation point

We have multiple domains on our Office 365 tenant. I would like to know if it is possible to use multiple identity providers (e.g. Okta or PingIdentity) within one Office 365 tenant - one identity provider per domain. So, users in would authenticate using Azure AD. And users in would authenticate using Okta.

Has anyone tried or had any experience doing this?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,543 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Akshay-MSFT 17,656 Reputation points Microsoft Employee

    Hello @Timothy A. Dilbert ,

    Thanks for posting your query.

    If your organization uses a third-party federation solution, you can configure single sign-on for your on-premises Active Directory users with Microsoft Online services, such as Microsoft 365, provided the third-party federation solution is compatible with Azure Active Directory.

    For questions regarding compatibility, please contact your identity provider. If you would like to see a list of identity providers who have previously been tested for compatibility with Azure AD, by Microsoft, see Azure AD identity provider compatibility docs.

    This depends on the offering and compatibility of your IDP. Based upon this question for OKTA as per, you need to define both tenant to which IDP will be connected and domain you want to federate from the tenant. So, users belonging to non-federated domain will be using Azure AD as IDP



    Please do let me know if you have any further queries in the comments section.

    Akshay Kaushik

    Please "Accept the answer", "Upvote" and rate your experience if the suggestion works as per your business need. This will help us and others in the community as well.