This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Download Microsoft Edge
More info about Internet Explorer and Microsoft Edge
In this article, you'll learn about configuring a SAML 2.0 provider for Power Pages with Azure Active Directory (Azure AD).
Power Pages can be configured with identity providers that conform to the Security Assertion Markup Language (SAML) 2.0 standard. In this article, you'll learn about using Azure AD as an example of identity providers that use SAML 2.0.
Changes to the authentication settings
might take a few minutes
to be reflected on the website. Restart the website by using
the admin center
if you want the changes to be reflected immediately.
To configure Azure AD as the SAML 2.0 provider
Select
Add provider
for your website.
For
Login provider
, select
Other
.
For
Protocol
, select
SAML 2.0
.
Enter a provider name.
Select
Next
.
In this step, you create the application and configure the settings with your identity provider.
The Reply URL is used by the app to redirect users to the website after the authentication succeeds. If your website uses a custom domain name, you might have a different URL than the one provided here.
More details about creating the app registration on the Azure portal are available in
Quickstart: Register an application with the Microsoft identity platform
.
Sign in to the
Azure portal
.
Search for and select
Azure Active Directory
.
Under
Manage
, select
App registrations
.
Select
New registration
.
Enter a name.
If necessary, select a different
Supported account type
. More information:
Supported account types
Under
Redirect URI
, select
Web
(if it isn't already selected).
Enter the
Reply URL
for your website in the
Redirect URI
text box.
Example:
https://contoso-portal.powerappsportals.com/signin-saml_1
If you're using the default website URL, copy and paste the
Reply URL
as shown in the
Create and configure SAML 2.0 provider settings
section on the
Configure identity provider
screen (step 6 above). If you're using a custom domain name for the website, enter the custom URL. Be sure to use this value when you configure the
Assertion consumer service URL
in your website settings while configuring the SAML 2.0 provider.
For example, if you enter the
Redirect URI
in Azure portal as
https://contoso-portal.powerappsportals.com/signin-saml_1
, you must use it as-is for the SAML 2.0 configuration in Power Pages.
Select
Register
.
Select
Expose an API
.
For
Application ID URI
, select
Set
.
Enter the website URL as the
App ID URI
.
The website URL might be different if you're using a custom domain name.
Select
Save
.
Keep the Azure portal open, and switch to the SAML 2.0 configuration for Power Pages for the next steps.
In this step, enter the site settings for the website configuration.
If you closed the browser window after configuring the app registration in the earlier step, sign in to the Azure portal again and go to the app that you registered.
Metadata address
: To configure the metadata address, do the following:
Select
Overview
in the Azure portal.
Select
Endpoints
.
Copy the URL for
Federation metadata document
.
Paste the copied document URL as the
Metadata address
for Power Pages.
Authentication type
: To configure the authentication type, do the following::
Copy and paste the
Metadata address
configured earlier in a new browser window.
Copy the value of the
entityID
tag from the URL document.
Paste the copied value of
entityID
as the
Authentication type
.
Example:
https://sts.windows.net/7e6ea6c7-a751-4b0d-bbb0-8cf17fe85dbb/
Service provider realm
: Enter the website URL as the service provider realm.
Example:
https://contoso-portal.powerappsportals.com
The website URL might be different if you're using a custom domain name.
Assertion consumer service URL
: Enter the
Reply URL
for your website in the
Assertion consumer service URL
text box.
Example:
https://contoso-portal.powerappsportals.com/signin-saml_1
If you're using the default website URL, you can copy and paste the
Reply URL
as shown in the
Create and configure SAML 2.0 provider settings
step. If you're using a custom domain name, enter the URL manually. Be sure that the value you enter here is exactly the same as the value you entered as the
Redirect URI
in the Azure portal earlier.
Configure a SAML 2.0 provider for Power Pages with AD FS
FAQs for using SAML 2.0 in Power Pages
Configure a SAML 2.0 provider for Power Pages
