How can I setup an Azure SSO web application such that users can access the application by providing their User ID and Password instead of using the SSO login flow?

Question

We have a web application that is configured for single sign-on with SAML in Azure. There are users (employees) setup in the Active Directory however there are other users (contractors) who are not in the Active Directory and we need to give them the ability to sign in to the application as well. Is it possible to setup the SSO web application such that users can sign in using their traditional login credentials (User ID, Password) if they do not want to use SSO?

Answer 1

@Sunil Ferro

Thank you for posting this in Microsoft Q&A.

As I understand you have an SAML application configured in Azure AD. And you want users to be prompted for credentials whenever they try to access the application. Basically, you doesn't want SSO to work for users whoever tries to access this application.

To require users to be prompted for credentials every time they access the application, you need to update your application code to include forceAuthn="true" parameter in the authentication request. This is an SAML parameter that forces interactive authentication regardless of whether a valid PRT and/or Cookies are present or not.

Read more: https://learn.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.