What is the Difference Between Implementing SSO Normally vs. Implementing SSO and Adding the App to Microsoft Entra Application Gallery

Question

What is the Difference Between Implementing SSO Normally vs. Implementing SSO and Adding the App to Microsoft Entra Application Gallery from the Perspective of the App Owner and the User

Answer 1

Hi @Kanravee Warinsirikul

SSO without adding the app to the Microsoft Entra Application Gallery is only available to the users in the tenant where the application is configured. When configuring SSO and adding the app to the gallery, that enterprise application becomes available across all tenants.

Below are the differences between implementing SSO normally vs. implementing SSO and adding the app to the Microsoft Entra Application Gallery:

Implementing SSO Normally on App Owner Perspective:

1.The app owner manually configures the SSO integration.

2.The app owner has control over the SSO implementation and can customize it based on the requirements.

3.The app owner must keep track of any changes to the authentication mechanisms, update credentials, and manage roles and access permissions.

Implementing SSO and Adding the App to the Microsoft Entra Application Gallery on App Owner Perspective:

1.By adding the app to the Microsoft Enterprise Application Gallery, the app owner can leverage the centralized platform for app discovery and management.

2.The app owner simply has to approve and configure certain settings (like user assignments) and doesn’t need to manually configure the detailed SSO flow.

3.If any updates to the SSO configuration are needed (e.g., authentication protocols or security improvements), Microsoft Entra ID typically handles this automatically, ensuring better security and compliance.

In both Single Sign-On (SSO) implementations and applications listed in the Microsoft Entra Application Gallery, the user perspective is focused on providing a seamless and convenient experience for accessing and using applications:

• Users benefit from signing in once and gaining access to multiple applications without needing to enter credentials repeatedly.
• Users can easily discover and access applications without the managing multiple sets of credentials.
• Users can have a unified experience where they can find and access applications in a centralized location.

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.