SAML 2.0 Integration using Dyanmics 365(AAD) as IDP

(0) Share

Report

Posted on by jamesyang

We would like to implement SSO using SAML 2.0 , the login flow is:

1. our Model Driven Power App is installed in Dynamics 365

2. user clicks on one of menu in our App. It auto login the user to our external web app using saml2.0 protocol

* Dynamics 365 is the SAML IDP (which is AAD), our external app is a SAML SP.

could anyone share how to implement this?

thanks

Categories:

Power Apps Pro Dev & ISV

I have the same question (0)

All responses (4)

Answers (1)

alrezac on at

Like (1)

Report

Hi,

We have some documentation on SAML 2.0 in the dynamics environment here: https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/configure-saml2-settings

Take a look through it and see if that helps answer your question. If not this might be something that would be better to ask the Microsoft support team. If you would like to go down that route I'll include a link below; Otherwise if any other communities members have any idea feel free to chime in.

If you would like to create a ticket with Microsoft Customer Support here is a link on how to do so: https://docs.microsoft.com/en-us/power-platform/admin/get-help-support

Regards,

Alex

-------

Community Support Team _ Alex Rezac
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Was this reply helpful? Yes No
Verified answer

ChrisPiasecki 6,422 Most Valuable Professional on at

Like (1)

Report

Hi James yang,

Can you provide some more detail about the external application? Is it a Power Apps portal, or a custom built app? If custom, I'd recommend reviewing the document below for configuring Saml2 auth in AAD.

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-saml-single-sign-on

You'll essentially need to register your service provider app in Azure AD. If you have the metadata XML file or Url for your SP it is straightforward, you can otherwise populate the configuration metadata manually. You'll need to setup any claims mappings needed for your application to identity the user, and if needed, any authorization.

For the service provider side of things, I recommend finding a SAML2 library to use available for the language used. I've used sustainsys/saml2 for .NET apps, and spring security saml for Java.

The important thing to ensure is that the configuration is consistent on both sp and idp side. E.g. Signature algorithms, endpoints, signing behavior for assertions, etc.

Hope this helps. Good luck.

Was this reply helpful? Yes No
jamesyang 40 on at

Like (0)

Report

Thanks Alex. we have an external app. your suggestion works.

Was this reply helpful? Yes No
HulkHuang 2 on at

Like (0)

Report

Hello,
because I get answers from the MS support team, current dynamics 365 online can't support saml (external URL for saml).
so I want to know, how to configuration enterprise applications in Azure AD for your Dynamics 365 Environment as a Service provider.
Thanks

Was this reply helpful? Yes No