How to authenticate AzureAD users using OpenID Connect IDP provider like Okta?

Question

I have added users in Azure AD and applications(both microsoft and custom apps) configured for those users. Now I want users in AzureAD to access those apps by authenticating with an OpenID Connect idp provider like okta.
Or in other words users in Azure AD should be able to login to https://myapps.microsoft.com/
by providing authentication at Okta. Azure should validate the token from okta and if the user in the token claim is found in AzureAD he should be logged in to his home page.

Answer 1

@muneer To integrate Azure AD with Okta as an identity provider using OpenID Connect, you can follow the steps below:

1. In the Okta administration portal, select Security > Identity Providers to add a new identity provider. Select Add OpenID Connect.
2. On the Identity Provider page, enter a name for the identity provider and the OpenID Connect metadata URL for Azure AD The metadata URL is https://login.microsoftonline.com/{tenant-id}/.well-known/openid-configuration, where {tenant-id} is the ID of your Azure AD tenant.
3. Select Show Advanced Settings. By default, this configuration ties the user principal name (UPN) in Okta to the UPN in Azure AD for reverse-federation access. If your UPNs in Okta and Azure AD don't match, select an attribute that's common between users.
4. Finish your selections for autoprovisioning. By default, if no match is found for an Okta user, the system attempts to provision the user in Azure AD. If you've migrated provisioning away from Okta, select Redirect to Okta sign-in page.
5. On the Identity Providers menu, select Routing Rules > Add Routing Rule. Use one of the available attributes in the Okta profile.

By following these steps, you can integrate Azure AD with Okta as an identity provider using OpenID Connect. Let me know if you have any further questions. Let me know if you have any further questions. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.