How to get the SSO enabled apps in Azure AD tenant via PowerShell or any other way?

Question

How to get the SSO enabled apps in Azure AD tenant via PowerShell or any other way?

Answer 1

To get a list of Single Sign-On (SSO) enabled applications in an Azure AD tenant, you can use PowerShell. Specifically, the Azure AD PowerShell module can be utilized for this purpose. Here's a general approach:

1. Install the Azure AD PowerShell Module (if not already installed):

      Install-Module -Name AzureAD
   

2. Connect to Your Azure AD Tenant:

      Connect-AzureAD
   

3. Retrieve SSO Enabled Applications: You can use a command like Get-AzureADServicePrincipal to list applications, and then filter or inspect these to determine which have SSO enabled.

      Get-AzureADServicePrincipal -All $true | Where-Object { $_.Tags -like "*WindowsAzureActiveDirectoryIntegratedApp*" }
   

This command lists all service principals (applications) and filters for those with a specific tag that typically denotes SSO integration.

Remember, the specific command and its filters might vary based on how SSO is set up in your environment. If this information was helpful, please consider accepting the answer. If you need further assistance or more specific commands, feel free to ask.