Testing IdP-Initiated SAML Login with Azure as the IdP

[konrad.sopala]

Problem statement

This article provides details on setting up IdP-initiated SAML login from Azure to Auth0.

Solution

1. Create a SAML Connection with Auth0 as the SP and Azure as the IdP. Refer to the following doc:

Setting up Azure AD as SAML enterprise connection

Problem Statement Sometimes the user wants the flexibility of SAML when setting up a connection in Auth0. Solution Azure setup: Open portal.azure.com Go to Azure Active Directory > Enterprise applications > + New Application Now click + Create your own application For convenience, put AzureViaSaml under the What’s the name of your app? Under What are you looking to do with your application? select the Integrate any other application you don’t find in the gallery (Non-gallery) and click Create N…

2. Enable IdP-initiated SSO in the SAML connection settings.
3. (Optional) To test the full flow from an application that communicates with Auth0 using the OIDC protocol, configure the application according to this guide:

Configure IdP-Initiated SAML Sign-on to OIDC Apps

4. In the Azure Portal, navigate to Microsoft Entra ID > Enterprise Applications > Your SAML Application > Single sign-on
5. Ensure that the Sign on URL field under Basic SAML Configuration is empty. This ensures that Azure will do an IdP-initiated flow when you test (i.e., authenticate the Azure user and then POST a SAML response to /login/callback). If a Sign on URL is configured, Azure will just redirect there to start an SP-initiated flow.

6. Navigate to Test single sign-on with SAML_IdP and Click Test.