Okta integrated SP app uses Entra ID to validate User

Loading

Skip to Navigation Skip to Main Content

Search

Search

Select Language

0D5KZ00001E8Yau0AFOkta Classic EngineSingle Sign-OnAnswered2025-08-29T14:56:12.000Z2025-08-05T21:29:49.000Z2025-08-29T14:56:12.000Z

DarcyW.33192 (Customer) asked a question.

August 5, 2025 at 9:29 PM

Okta integrated SP app uses Entra ID to validate User

Hi, I am looking for the best way to setup Okta and Entra ID according to my requirements.

I have a SP application running that can only have one IdP associated with it, I have integrated it with my Okta IdP.

A customer manages their users in Entra ID, and wants their users to access my SP application, and be authenticated through their Entra ID.

I have been able to add their Entra ID as and Idp in my Okta however I don't want the customer users to be created in my Okta directory, I just want them to be redirected to their Entra ID SSO when they try and sign into my application. My current setup has an okta enterprise app in Entra ID that is linked via SAML.

I want to create an enterprise app in Entra ID that points directly to my SP, and when users try to access that app, they are redirected to Entra ID via my okta to authenticate. and then login.

Apologies if terminology or knowledge on this is lacking, I am struggling to find good references on how to set this up, any help would be appreciated.

Single Sign-On

Top Rated Answers

paul.stiniguta1.508386743840768E12 (Okta, Inc.)
10 months ago
Hello @DarcyW.33192 (Customer) Thank you for posting on our Community page!

Setting up Entra ID as an IDP in Okta would be a good choice and the best option in my opinion. Please keep in mind that the users from Entra will need to be in Okta as well for the authentication to work as intended.
You can also review our doc below for more configuration settings:
https://support.okta.com/help/s/article/Integrate-Microsoft-Entra-as-an-Identity-Provider-for-Okta-and-Vice-Versa?language=en_US

Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Just released: More Okta Community badges just added.
Expand Post
Selected as Best

All Answers

paul.stiniguta1.508386743840768E12 (Okta, Inc.)
10 months ago
Hello @DarcyW.33192 (Customer) Thank you for posting on our Community page!

Setting up Entra ID as an IDP in Okta would be a good choice and the best option in my opinion. Please keep in mind that the users from Entra will need to be in Okta as well for the authentication to work as intended.
You can also review our doc below for more configuration settings:
https://support.okta.com/help/s/article/Integrate-Microsoft-Entra-as-an-Identity-Provider-for-Okta-and-Vice-Versa?language=en_US

Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Just released: More Okta Community badges just added.
Expand Post
Selected as Best
- DarcyW.33192 (Customer)
  10 months ago
  Thanks Paul,
  
  My goal is to have the users never be shown the okta login page or have to do anything to activate their okta account, since we dont want them using that, and also when a user is deactivated in Entra, they are not able to access the application anymore, or Okta. Though this might require some sort of user sync with groups.
  
  Is this possible, or users will always need to interact with okta in this setup?
  Expand Post
  - paul.stiniguta1.508386743840768E12 (Okta, Inc.)
    10 months ago
    Hello @DarcyW.33192 (Customer) Users can be created as active and they will not need to activate their account or since you have Entra ID as an IDP setup in Okta, you can create users though JIT and this way users are created automatically when they login the first time.
    You can also have the users login though Entra and users will never need to go into Okta as once they access the application in Entra they can be sent to Okta and then the application within Okta.
    For this you can review our doc below:
    https://support.okta.com/help/s/article/Sign-in-to-Cloud-Apps-Directly-and-Bypass-the-Okta-Dashboard?language=en_US
    
    Thank you for reaching out to our Community and have a great day!
    --
    Help others in the community by liking or hitting Select as Best if this response helped you.
    Just released: More Okta Community badges just added.
    Expand Post

This question is closed.

Recommended content

Forum

Okta integration with Entra ID using EAM

Forum

Entra ID Integration - not provisioning or using Entra as IDP

Forum

Attributes that cannot be directly modified in Entra ID when integrating Okta with M365

Forum

Can Okta be integrated with Microsoft Entra Permission Management

Loading

Okta integrated SP app uses Entra ID to validate User