Is B2B IDP-Initiated SSO supported and SAML signature verification
I am researching MS Entra as an Authentication Service Provider for an app we recently ported into Azure. Our clients primarily use IDP-Initiated SSO to authenticate their users with our application. The flow is their user authenticates within our client's portal. The user chooses to navigate to our app. The client portal posts a signed SAML response to us where we identify the client and use their configured public key to verify the SAML signature. Finally, we verify the SAML assertions and provision the user with the specified role.
We are looking to implement a similar flow using Entra where our client partners can send their already authenticated users into our application via IDP-Initated SSO for a relatively seamless transition. Can Entra support a flow like this? We have hundreds of clients, and each client would have a unique public key used to verify their SAML Responses.