Friday, 20 February 2026

>

>[!Note]

| `https://<customer-domain>.concursolutions.com` |

```

c. **Sign on URL**: Enter a URL that has the following pattern: `https://<CUSTOMER_LENSES_BASE_URL>`. An example is `https://lenses.my.company.com`.

`https://<companyname-pricing>.ordering.predictix.com/sso/request`

`https://<servername>.sapbydesign.com`

`https://<SUBDOMAIN>.sciforma.net/sciforma/main.html`

The scenario outlined in this article assumes that you already have the following prerequisites:

o **Custid** = Enter unique EBSCO customer ID

In this section, you create a user named Britta Simon on your MiCloud Connect account. Users must be created and activated before using single sign-on.

| 4 | true | emailIsPrimary | Use this attribute to set business email as primary in SuccessFactors. If business email isn't primary, set this flag to false. |

- devx-track-arm-template

Prerequisites to use PowerShell or Graph Explorer for Microsoft Entra roles.

A Microsoft Entra documentation page was updated: Qs Configure Cli Windows Vm.

A Microsoft Entra documentation page was updated: Qs Configure Cli Windows Vmss.

A Microsoft Entra documentation page was updated: Qs Configure Portal Windows Vm.

A Microsoft Entra documentation page was updated: Qs Configure Portal Windows Vmss.

A Microsoft Entra documentation page was updated: Qs Configure Powershell Windows Vm.

A Microsoft Entra documentation page was updated: Qs Configure Powershell Windows Vmss.

A Microsoft Entra documentation page was updated: Qs Configure Template Windows Vm.

A Microsoft Entra documentation page was updated: Qs Configure Template Windows Vmss.

A tutorial that shows you how to use a Linux VM/VMSS to access Azure resources.

A tutorial that shows you how to use a Windows VM/VMSS to access Azure resources.

- devx-track-arm-template

- devx-track-arm-template

- devx-track-arm-template

* [Federal Risk and Authorization Management Program](https://www.fedramp.gov/)

`https://saml.achieve3000.com/district/<District Identifier>`

To perform the Single Sign-On configuration on the Crowd Log side, please refer to the Crowd Log SAML admin settings documentation.

To configure single sign-on on **In Case of Crisis - Mobile** side, you need to send the downloaded **Certificate (Raw)** and copied **User access URL** from Azure portal to In Case of Crisis - Mobile support team. They set this setting to have the SAML SSO connection set properly on both sides.

To configure single sign-on on **Lexmark Cloud Services (SAML)** side, you need to send the **App Federation Metadata Url** to Lexmark Cloud Services (SAML) support team. They set this setting to have the SAML SSO connection set properly on both sides. Also review the [Lexmark documentation](https://support.lexmark.com/en_us/manuals-guides/online/Lexmark-Cloud-Platform/configuring-microsoft-entra-id-federation-for-saml.html) on Configuring Microsoft Entra ID with SAML Federation

To configure single sign-on on **ON24 Virtual Environment SAML Connection** side, you need to send the downloaded **Federation Metadata XML** and appropriate copied URLs from the application configuration to ON24 Virtual Environment SAML Connection support team. They set this setting to have the SAML SSO connection set properly on both sides.

`https://<tenant-name>.instructure.com/saml2`

1. In another browser instance, navigate to the SAML SSO page created for you by the Gaggle support team (for example: `https://accounts.gaggleamp.com/saml_configurations/oXH8sQcP79dOzgFPqrMTyw/edit`).

Before you begin to configure the O'Reilly learning platform to support provisioning with Microsoft Entra ID, you’ll need to generate a SCIM API token within the O’Reilly Admin Console.

To configure single sign-on on OutSystems side, you need to download the IdP forge component, configure it as mentioned in the [instructions](https://success.outsystems.com/Documentation/Development_FAQs/How_to_configure_OutSystems_to_use_identity_providers_using_SAML#Configure_your_application_to_use_IdP_connector). After installing the component and do the necessary code changes, configure Microsoft Entra ID by downloading Federation Metadata XML from Azure portal and upload on OutSystems IdP component, according to the following [instructions](https://success.outsystems.com/Documentation/Development_FAQs/How_to_configure_OutSystems_to_use_identity_providers_using_SAML#Azure_AD_.2F_ADFS).

To configure single sign-on on **SpectrumU** side, you need to send the downloaded **Federation Metadata XML** and appropriate copied URLs from the application configuration to SpectrumU support team. They set this setting to have the SAML SSO connection set properly on both sides.

`https://<companyname>.attasksandbox.com/SAML2`

**To get a user provisioned, perform the following steps:**

1. Select one of the four following Tenant URLs according to your Clarizen One environment and data center:


* [A Microsoft Entra tenant](~/identity-platform/quickstart-create-new-tenant.md)

This article describes the steps you need to perform in both askSpoke and Microsoft Entra ID to configure automatic user provisioning. When configured, Microsoft Entra ID automatically provisions and de-provisions users and groups to askSpoke using the Microsoft Entra provisioning service. For important details on what this service does, how it works, and frequently asked questions, see [Automate user provisioning and deprovisioning to SaaS applications with Microsoft Entra ID](~/identity/app-provisioning/user-provisioning.md).

This article describes the steps you need to perform in both Whimsical and Microsoft Entra ID to configure automatic user provisioning. When configured, Microsoft Entra ID automatically provisions and de-provisions users and groups to [Whimsical](https://whimsical.com) using the Microsoft Entra provisioning service. For important details on what this service does, how it works, and frequently asked questions, see [Automate user provisioning and deprovisioning to SaaS applications with Microsoft Entra ID](~/identity/app-provisioning/user-provisioning.md).

Before configuring Looop for automatic user provisioning with Microsoft Entra ID, you need to retrieve some provisioning information from Looop.

The scenario outlined in this article assumes that you already have the following prerequisites:


Learn about secretless authentication in Azure to reduce credential risks, enhance security, and streamline user experience with Zero Trust principles.

To configure single sign-on in Tripwire Enterprise, please see **Using Tripwire Enterprise with SAML Authentication** section in the Tripwire Enterprise Hardening Guide, available for download on the Tripwire Customer Center. If you require assistance, contact [Tripwire Enterprise support team](mailto:support@tripwire.com).

This article provides information that you need to synchronize your user passwords from an on-premises Active Directory instance to a cloud-based Microsoft Entra instance.

- Always test alerts.

manager: pmwongera

In February 2024, we added the following 10 new applications in our App gallery with Federation support:

Use Microsoft Entra groups to simplify role assignment management in Microsoft Entra ID.

Learn about protected actions in Microsoft Entra ID.

|Partner|Description|

Learn how to a role-assignable group in Microsoft Entra ID using the Microsoft Entra admin center, Microsoft Graph PowerShell, or Microsoft Graph API.

Remove role assignments in Microsoft Entra ID using the Microsoft Entra admin center, Microsoft Graph PowerShell, or Microsoft Graph API.

`https://<SUBDOMAIN>.anaqua.com/anaqua/Public/login.aspx`

Find content, API references, and audit and monitoring references related to role-based access control (RBAC) for Microsoft 365 and other services

Microsoft Entra ID uses throttling to protect the cloud service from denial-of-service (DoS) attacks. Currently Microsoft Entra ID has a throttling limit of 6,000 writes per 5 minutes (72,000 per hour). For example, the following operations can be throttled:

Ensure that your organization's administrative access and administrator accounts are secure. For system architects and IT pros who configure Microsoft Entra ID, Azure, and Microsoft Online Services.

Grant permissions for application access management in Microsoft Entra ID

An [agent identity blueprint](agent-blueprint.md) is used to create agent identities and request tokens using those agent identities. During the process for creating an agent identity blueprint, you set the [owner and sponsor](agent-owners-sponsors-managers.md) of that blueprint, to establish accountability and administrative relationships. You also configure an identifier URI and define a scope for agents created from this blueprint if the agent is designed to receive incoming requests from other agents and users.

A Microsoft Entra documentation page was updated: Create Delete Agent Identities.

Learn how to use Microsoft Entra ID Protection for B2B users to secure your organization. Discover benefits and steps to unblock accounts.

You assign users the role with the [least privileges necessary to perform their tasks](~/identity/role-based-access-control/delegate-by-task.md). This practice minimizes the number of Global Administrators and instead uses specific administrator roles for certain scenarios.

A conceptual article describing access package visibility in the My Access portal.

|[Edgile, a Wipro company](https://aka.ms/EdgileEntraIDGov) |"Edgile, a Wipro company is excited to be a Microsoft Launch Partner for Microsoft Entra ID Governance. Our deep and broad experience in IGA and security will ensure your project is a success. Our project accelerators will reduce your risk and deliver results faster." |

| Windows Microsoft Entra Registered device | User selects a tenant at first sign-in; remains connected to that tenant. | ❌ | ❌ | ❌ | ✅ | Cannot switch to other registered tenants for now. Allows user to switch to a resource tenant using external user access(B2B). |

author: MicrosoftGuyJFlo

Create a Conditional Access policy for end users or groups and deliver your security profile through Conditional Access Session controls. Conditional Access is the delivery mechanism for user and context awareness for Internet Access policies. To learn more about session controls, see [Conditional Access: Session](/azure/active-directory/conditional-access/concept-conditional-access-session).

Step-by-step instructions for configuring managed identities for Azure resources on a virtual machine scale set using the Azure portal.

Step-by-step instructions for configuring system and user-assigned managed identities on an Azure VMs.

A tutorial that walks you through the process of using a system-assigned managed identity on a virtual machine (VM) to access Azure Resource Manager.

Learn how to use managed identities with Windows VMs using the Azure portal, CLI, PowerShell, Azure Resource Manager template

Step-by-step instructions for viewing the Azure resources that are associated with a user-assigned managed identity

Step-by-step instructions for viewing the service principal of a managed identity.

Step-by-step instructions and examples for using an Azure VM-managed identities for Azure resources service principal for script client sign-in and resource access.

An overview how developers can use managed identities for Azure resources.

| **[BEMO](https://aka.ms/BemoSSELaunchPartner)** | BEMO is a trusted expert in delivering Microsoft's SSE solution to SMBs across the United States with up to 1,000 employees. BEMO specializes in Modern Work and Security, helping SMBs achieve their security and compliance (SOC 2, CMMC, ISO 27001, NIST 800-171, HIPAA) goals by leveraging Microsoft technologies. |