I'm being asked to provide an SP Entity ID and ACS URL for a third party in order to set up a custom external identity in Azure

Question

Hi

We have an external (non-Microsoft user) customer who we'd like to provide access to an internal PowerApp for.

In order for them to authenticate using their own SAML which I believe they have developed in house, I was going to create a custom external identity in Azure.

To receive their metadata.xml to set this up, they have requested an SP Entity ID and ACS URL from us.

I'm not clear how to create or find these within Azure. Have read a lot about creating an Enterprise application but we've only done this the opposite way, for when wanting to use our Entra IDs to SSO to third party apps.

Any help would be appreciated.

Thanks!

Answer 1

Hello @John Chase,

As your customer have developed their own SAML IdP and in this scenario Entra ID will be acting as a Service Provider below are the normally used standard values when Entra ID acts as SAML SP.

SP Entity ID : https://login.microsoftonline.com/<your-tenant-id>/

ACS URL : https://login.microsoftonline.com/<your-tenant-id>/saml2

(specify your tenant ID)

Kindly do note these values are global for your tenant across all apps unless required for anything custom.

This will help in federating their identity provider (their SAML IdP) with your Entra ID tenant, so that they can authenticate using their credentials. From your end it would be required to setup the custom SAML/WS-Fed identity provider under External Identities provider in your Entra ID.