Reputation: 1
My current setup is .net web application plus Azure AD as IDP for my application. My application is a public web application where anyone can sign up and get in. We are in process of signing up a contract with one of our clients who already have their website and IDP (non-Microsoft).
Our requirement is that users login to their website, lets call it www.client.com and my website as www.mysite.com. So user "A" logs into www.client.com. User "A" sees a button "Go to mysite.com" on www.client.com. Once "A" click on this button, if he exists on mysite.com, he sees dashboard directly but if "A" does not exist - he sees mysite.com signup page.
Question: Is it possible to have SAML based trust relationship between their non-microsoft IDP and my Azure AD which acts as service provider? if yes, how is it implemented so users dont see login page and auto-login to mysite.com if exists.
Upvotes: 0
Views: 1270
Reputation: 646
Yes, it is possible. You can use your Azure AD as a service provider for their IDP.
You need to set up Direct Federation with your client.
To set up Direct Federation and configure your Azure AD as a SP as per the Document.
Upvotes: 1