Enable SSO for application

Question

How to enable SSO for specific application via Azure active directory If browse hostname it should authenticate via Azure active directory and back to application ,how to add users in azure active directory so that only that user can access the application

Answer 1

Hi @Nethra Shree ,

Thank you for reaching out the QnA community forum.

Enabling SSO:

To enable SSO for an application:

1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
2. Browse to Identity > Applications > Enterprise applications > All applications.
3. Enter the name of the existing application in the search box, and then select the application from the search results. For example, Microsoft Entra SAML Toolkit 1.
4. In the Manage section of the left menu, select Single sign-on to open the Single sign-on pane for editing.
5. Select SAML to open the SSO configuration page. After the application is configured, users can sign in to it by using their credentials from the Microsoft Entra tenant.
6. The process of configuring an application to use Microsoft Entra ID for SAML-based SSO varies depending on the application. For any of the enterprise applications in the gallery, use the configuration guide link to find information about the steps needed to configure the application.

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal-setup-sso#enable-single-sign-on

Restricting applications to specific users:

To update an application to require user assignment, you must be owner of the application under Enterprise apps, or be at least a Cloud Application Administrator.

1. Sign in to the Microsoft Entra admin center.
2. If you have access to multiple tenants, use the Directories + subscriptions filter

in the top menu to switch to the tenant containing the app registration from the Directories + subscriptions menu.

1. Browse to Identity > Applications > Enterprise applications, then select All applications.
2. Select the application you want to configure to require assignment. Use the filters at the top of the window to search for a specific application.
3. On the application's Overview page, under Manage, select Properties.
4. Locate the setting Assignment required? and set it to Yes. When this option is set to Yes, users and services attempting to access the application or services must first be assigned for this application, or they won't be able to sign-in or obtain an access token.
5. Select Save on the top bar.

Once you've configured your app to enable user assignment, you can go ahead and assign the app to users and groups.

1. Under Manage, select the Users and groups then select Add user/group.
2. Select the Users selector.

A list of users and security groups are shown along with a textbox to search and locate a certain user or group. This screen allows you to select multiple users and groups in one go.

1. Once you're done selecting the users and groups, select Select.
2. (Optional) If you have defined app roles in your application, you can use the Select role option to assign the app role to the selected users and groups.
3. Select Assign to complete the assignments of the app to the users and groups.
4. Confirm that the users and groups you added are showing up in the updated Users and groups list.

https://learn.microsoft.com/en-us/entra/identity-platform/howto-restrict-your-app-to-a-set-of-users#assign-the-app-to-users-and-groups-to-restrict-access

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information