Azure Active Directory - SAML config upload

Kyle Barr 11 Reputation points
2021-09-01T01:25:28.387+00:00

When adding a new Enterprise Application to Azure AD, you can select SAML for Single Signon. You can then upload an XML metadata file containing the basic configuration settings. So far I've gotten this to mostly work.

However, an Enterprise Application that we develop requires a DefaultRelay value. We'd like to provide clients with a simple config file they can upload when configuring our app for Azure AD SSO. Is there a way to configure an application's Relay Value via an uploaded XML file?

From my understanding, there are two types of SAML config files. One sets all the basic settings, and uses EntityDescriptor as its root element. The other allows you to set a whole bunch of additional attributes, and uses EntityConfig as its root. Azure AD worked perfectly fine with the first config, but I can't find a place to put the DefaultRelay in that config. And I'm not sure if the second config is supported by Azure AD.

Any tips to get this to work? Or do we need to instruct our clients to manually configure the DefaultRelay value?

Thanks.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,422 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.