Is there a developer SDK/API available that allows programmatically authenticating users on Azure AD without user interaction, using SAML 2.0?

Lok, Vincent 0 Reputation points
2023-01-23T22:04:27.0866667+00:00

I am writing testing software to test SASE firewalls. One requirement is to be able to simulate the login and authentication hundreds of test users using SAML without user interaction. So for instance, we would have a list of users/passwords that we have set up on Azure AD. We send each user to the firewall which will be redirected Azure AD for Authentication/Authorization. At that point we won't have a human typing in username/passwords, but would rely on some API to respond to AAD to continue the workflow and obtain authentication tokens for the firewall.
Alternatively, is there a way to have test users set up that automatically authenticate so rather than asking for username/password, Azure AD simply responds as if a successful interactive authentication occurred? It might be set up so a specific client ID for the test software could be used so that only users of a tenant with that client registered would act in such a way.
Is such a thing possible with Azure AD? Thank you for your time!

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,362 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Shweta Mathur 27,141 Reputation points Microsoft Employee
    2023-01-25T10:23:17.52+00:00

    Hi @Lok, Vincent,

    Thanks for reaching out.

    Using SAML, it is not possible to authenticate from Idp without user interaction. SAML does not support server-to-server interaction.

    It would be recommended to use OAuth to authenticate users in Azure AD which support server to server authentication.

    Hope this will help.

    Thanks,

    Shweta

    Please remember to "Accept Answer" if answer helped you.

    0 comments