Configure SAML based SSO for external user authentication

Gopal Vangala 0 Reputation points
2024-04-17T03:35:48.38+00:00

Hi,

We would like to expose our application to internet and authenticate users using Microsoft entra. Expecting the users to put in their personal ids or work\school Microsoft ids to sign in.

Based on research online, we need to create an entra app. I am not able to find guidance on my next steps.

  • How to assign unrestricted access to the app ? Once Microsoft validates @Outlook.com or work/school id our app will verify if they are defined in the application and allows only if we have the user defined in the app. We just want to know the user attributes from Microsoft. (app doesn't support hosting authorization checks outside of app)
  • How can we export a metadata file from entra for uploading into my packaged app and integrate it with entra for SAML based SSO? TIA.
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,652 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Akhilesh 5,015 Reputation points Microsoft Vendor
    2024-04-18T11:20:27.64+00:00

    Hi @Gopal Vangala

    Thanks for posting your question in the Microsoft Q&A forum!

    I Understand that you would like to configure SAML-based SSO for external user authentication in Microsoft Azure Cloud.

    To expose your application to the internet and authenticate users using Microsoft Entra, you’ll need to Register your application in Microsoft Entra ID (Azure AD) and configure it for single sign-on (SSO) with Microsoft Entra as the identity provider.

    You can use Microsoft Entra as an Identity Provider and configure your application to trust Azure AD as the SAML-based SSO provider.

    You can Manage users and groups assignment to an application.

    Once you have created your application registration and configured its permissions, you can download the metadata file for your application once you have the metadata file, you can upload it into your packaged app according to the app’s specific instructions for SAML SSO integration.
    For example, you can refer the below article Microsoft Entra SSO integration with Microsoft Entra SAML Toolkit

    Hope this helps. Do let us know if you any further queries.

    Thanks,

    Akhilesh.

    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.