Configure Microsoft Entra ID - SAML

This task shows you how to configure your identity provider using Microsoft Entra ID - SAML.

Note

Note

Secure Network Access is not supported with SAML.
  1. Select Onboarding.
    The Welcome window displays.
  2. Select Secure Hybrid Access [Secure Application Access or Secure Network Access].
    The Identity Provider window displays Google Workspace and Microsoft Entra ID options.
  3. Select Continue.
    The IDP Configuration window displays.
  4. Select the link to review the comprehensive tutorial on creating a SAML-based SSO in Microsoft Entra ID.
  5. Copy and paste the Identifier link and Reply URL link in Entra ID per the instructions in the tutorial.
    Entra ID creates a Login URL and Microsoft Entra ID Identifier.
  6. Paste the Login URL and Microsoft Entra ID Identifier into their Universal ZTNA fields.
  7. Upload the SAML Signing Certificate you downloaded from Entra ID

    The UI instructions explain how to upload the certificate.

  8. Optional: Select All Domains or Custom and enter the domain.
    If you select Custom, fill in the approved domains. Applicable for network and application access.
  9. Select Save.
  10. Select Update.
    Update Identity Provider pop-up window displays. This message cautions you that the Identity Provider change logs out current users.
  11. If you decide to continue, select Confirm.
  12. Select Next.
    The Onboarding - Access Groups window displays.
  13. Configure Users and Devices.
  14. Configure Resources.
  15. Configure Applications and Application Groups.
    You can skip this step if you are using Secure Network Access.
  16. Configure Policies.
9039247-00 Rev AC