Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,375 questions
Integration of the Azure SSPR with 3rd party SAML IDP
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 26%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOS%3C/text%3E%3C/svg%3E)
Oleksii Stepanenko
0
Reputation points
Hello!
I’ve been wondering if it’s possible to use 3rd party SAML IDP to provide a self service password reset function (SSPR) to AAD users.
I believe it’s possible to integrate 3rd party SAML IDP with AAD to sync usernames and passwords.
I'm curious if anyone has achieved this integration successfully, or if there's a consensus that it's simply not feasible.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT 32,311 Reputation points Microsoft Employee2023-09-07T06:06:00.61+00:00 @Oleksii Stepanenko Thank you for reaching out to us, As I understand you want to know whether if it's possible to use a third-party SAML IDP to provide self-service password reset function to Azure Active Directory (AAD) users ? If so, the answer is that it depends on the capabilities of the third-party SAML IDP.
Could you provide more details of the 3rd party IDP provider ?
Azure AD supports SAML-based single sign-on (SSO) with many third-party SAML IDPs. However, the ability to provide self-service password reset function to AAD users would depend on whether the third-party SAML IDP has that capability or not.
I hope this helps. Let me know if you have any further questions.
-
Oleksii Stepanenko 0 Reputation points
2023-09-11T09:11:23.7833333+00:00 Hi @Givary-MSFT
We are using Keycloak with OIDC and SAML 2.0 supportMight be there are configuration instructions for this integration, I've been searching for it, however, could not find the right one.
Appreciate your support!
Sign in to comment
Sign in to answer