Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,977 questions
Federation with External IDP for a domain
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 69%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAJ%3C/text%3E%3C/svg%3E)
Arun J
1
Reputation point
I want to federate user login to external IDP using saml for a custom domain but certain users under the same domain should be excluded from the federation and should be authenticated using Azure credentials.
Microsoft Entra ID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAV%3C/text%3E%3C/svg%3E)
Akhilesh Vallamkonda 15,310 Reputation points Microsoft External Staff Moderator2024-10-17T20:09:50.67+00:00 Hi @Arun J
Thank you for reaching us!
I understand that you would like to federate user to external IDP using SAML and you want to exclude few users from federation and should be authenticated using Azure credentials.
Please follow the below article to federate user login to an external IDP using SAML
Federation with SAML/WS-Fed identity providers
With help of Conditional Access policy, you can control the authentication flow. You can create a policy that targets the users you want to exclude from federation and specify that they should be authenticated using Azure credentials. -
Arun J 1 Reputation point
2024-10-21T05:21:08.9366667+00:00 Hi @Akhilesh Vallamkonda ,
Thanks for the assistance i checked with conditional Access policy but could not figure out how to achieve this. Can you please help with more details.
Sign in to comment
Sign in to answer