Use SAML/WS-Fed federation as an identity provider in External tenant

Question

We have an external tenant and want to add our workforce tenant as an identity provider.

According to the label on the page where we can add custom identity provider, we can use OpenID Connect, SAML, WSFed external identity providers.

When we click on "Add new", we can only select "SAML/WS-Fed".

We were able to configure it. But then it didn't show as an identity provider for our user flow.

According to the documentation, federation with SAML/WS-Fed identity providers is only available for workforce tenants and not the external tenant we are using.

On another page of the documentation, it says the same.

Please confirm if we are flogging a dead horse or if there is a chance to make this work.

Answer 1

Hi @Manuel Tospann

Thank you for posting this in Microsoft Q&A.

I understand you are concerning whether it is possible to add a workforce tenant as an identity provider for an external tenant, specifically using SAML/WS-Fed protocols.

As stated in the document, SAML/WS-Fed identity providers are currently only supported for workforce tenants and not for external tenants such as the one you are utilizing.

You can refer https://learn.microsoft.com/en-us/entra/external-id/customers/concept-supported-features-customers for all the current features in External tenant.

Keep checking https://learn.microsoft.com/en-us/entra/external-id/customers/whats-new-docs for monthly updates on external tenant.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.