Overview
This guide walks a Microsoft Entra ID administrator through the steps required to federate Entra ID (the Identity Provider, or IdP) with the Edlio Service Provider (SP).
By the end of this guide you will have:
Created an Enterprise Application in Entra ID and configured its Basic SAML Configuration.
Configured the Required Name ID and the additional claims Edlio expects.
(Optional) Mapped Entra ID app roles to the SP role values Edlio accepts.
Sent the App Federation Metadata URL (or equivalent values) to Edlio.
Prerequisites
An Entra ID tenant licensed for SAML-based SSO on Enterprise Applications (Microsoft Entra ID P1 or higher is required for non-gallery SAML SSO)
An account with the Cloud Application Administrator, Application Administrator, or Global Administrator role.
The SP details listed in Section 1 of this guide.
1. Service Provider Information
These values should be pasted directly into the Entra ID Enterprise Application later in this guide.
Field | Value |
SP Metadata URL | |
SP Entity ID (Identifier) | |
Assertion Consumer Service URL (ACS / Reply URL) | |
Supported ACS bindings | HTTP-POST and HTTP-Redirect |
NameID Format | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress |
NameID Value | The user's email address (user.mail) |
2. Create the Enterprise Application