Is B2B IDP-Initiated SSO supported and SAML signature verification

J Bjurstrom 5 Reputation points
2023-08-08T23:20:20.0233333+00:00

I am researching MS Entra as an Authentication Service Provider for an app we recently ported into Azure. Our clients primarily use IDP-Initiated SSO to authenticate their users with our application. The flow is their user authenticates within our client's portal. The user chooses to navigate to our app. The client portal posts a signed SAML response to us where we identify the client and use their configured public key to verify the SAML signature. Finally, we verify the SAML assertions and provision the user with the specified role.

We are looking to implement a similar flow using Entra where our client partners can send their already authenticated users into our application via IDP-Initated SSO for a relatively seamless transition. Can Entra support a flow like this? We have hundreds of clients, and each client would have a unique public key used to verify their SAML Responses.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} vote

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.