# Azure AD as identity provider

**URL:** <https://developer.sailpoint.com/discuss/t/azure-ad-as-identity-provider/2367>\
**Category:** SHF Discussion and Questions\
**Created:** [December 13, 2021, 2:50pm UTC](https://developer.sailpoint.com/discuss/t/azure-ad-as-identity-provider/2367 "2021-12-13T14:50:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![seemarani](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@seemarani](https://developer.sailpoint.com/discuss/u/seemarani)\
**Post date:** [December 13, 2021, 2:50pm UTC](https://developer.sailpoint.com/discuss/t/azure-ad-as-identity-provider/2367/1 "2021-12-13T14:50:00Z")

</div>

Hi Team,

We’ve Azure AD, which helps user to reset account password in their current implementation and serve as single sign on. All on Prem AD accounts are synced with Azure AD. After IDN implementation we should use Azure AD for strong authentication as well as password reset purpose. I do see a feature, which is to use Azure AD as identity provider (SAML configuration). Is it right direction, if so do we need to select sign in option in identity profile with Azure AD as source. Please guide

---

<div class="post-metadata">

**Author:** ![Learingiam](https://avatars.discourse-cdn.com/v4/letter/l/e99b99/32.png) [@Learingiam](https://developer.sailpoint.com/discuss/u/Learingiam)\
**Post date:** [December 14, 2021, 7:46pm UTC](https://developer.sailpoint.com/discuss/t/azure-ad-as-identity-provider/2367/2 "2021-12-14T19:46:45Z")

</div>

Hi ,

We did this setup and almost a stright forward one, Once you have Enterprise Application ready in Azure

From IDN side you need provide below details  
You need give SAML Assertion details from Identitynow side and entityid you will find these details in  
Admin–\>Global–\>Security Settings–\>Service provide  
in this screen you will find in last section you will see both

From Azure AD to Identitynow  
1)Certificate  
2)EntityId  
3)Login url for post

---

<div class="post-metadata">

**Author:** ![seemarani](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@seemarani](https://developer.sailpoint.com/discuss/u/seemarani)\
**Post date:** [December 15, 2021, 4:37am UTC](https://developer.sailpoint.com/discuss/t/azure-ad-as-identity-provider/2367/3 "2021-12-15T04:37:27Z")

</div>

@Learingiam we’ve followed these steps, one question is for end users to sign in to identitynow we’ve to use Azure application, so we should configure this application in identity profile sign in option?

---

<div class="post-metadata">

**Author:** ![Learingiam](https://avatars.discourse-cdn.com/v4/letter/l/e99b99/32.png) [@Learingiam](https://developer.sailpoint.com/discuss/u/Learingiam)\
**Post date:** [December 15, 2021, 9:33am UTC](https://developer.sailpoint.com/discuss/t/azure-ad-as-identity-provider/2367/4 "2021-12-15T09:33:15Z")

</div>

Not Required as already setup as identity provider

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 19, 2023, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/azure-ad-as-identity-provider/2367/5 "2023-07-19T14:22:23Z")

</div>