The process of configuring an application to use Azure AD for Single Sign On varies depending on the application.
There are number of ways to choose the applications either from Gallery or from Non-Gallery.
The Azure Active Directory (Azure AD) application gallery has SaaS applications that have been pre-integrated with Azure AD. There are thousands of applications that make it easy to deploy and configure SSO and automated user provisioning.
There are many applications which are still not in the gallery, and Azure AD allow you to create your own application or integrate any other application which is not part of the gallery to make a SAML based application.
You can configure application with Azure AD to use different authentication protocols.
There are some applications in enterprise applications e.g smartSheet or any other application which you developed and tries to integrate with AD allows you to use only OIDC standard for SSO. Those application won't allow to configure SSO with SAML.
Only those applications which supports SAML based SSO allow you to switch from OIDC to SAML by choosing "Change single sign-on mode".
If you are looking to configure Salesforce application with Azure AD for SSO then you can add this application as a gallery application which is pre-integrated with Azure AD.
You can use below article to configure salesforce application with Azure AD,
https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/salesforce-tutorial
If you are looking to integrate an application which is not part of Gallery, then you can add that application as non-gallery application by using below steps.
- Login to Azure portal.
- Click on Azure Active directory blade.
- Click on Enterprise application blade and then click on "New application" on the top of the screen.
- Now search for application that you want to configure for SSO in search bar. If you find the application then it means application is pre-integrated with Azure AD and you just have to select the application and add it to Azure AD.
- If you do not find the application after search for it, then you will have to click on "Create your own application" on the top of the screen.
- Name the application and select the third option.
- You can click on create and then this application will be listed under enterprise applications tab.
- You can open the application from the list and then click on "Single sign-on" option.
- Select the option depending on how you want to configure an app and follow the steps.
Do let me know if you have any further questions.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.