How to Set Up Azure Multitenant SSO / Azure AD Multi-Tenant Login for WordPress?

Steps to configure Azure AD Single Sign-On (SSO) Login into WordPress

1. Setup Azure AD as IdP (Identity Provider)

Follow the steps below to configure Azure AD as IdP for WordPress

Configure Azure AD as IdP

• In the SAML SP SSO plugin for WordPress, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are required to configure Azure AD as the Identity Provider.

• Log in to Azure AD Portal as admin
• Select Azure Active Directory.

• Select App registrations.

• Click on New registration.

• Assign a Name and choose the Supported account types as Accounts in any orgnaizational directory (Any Azure AD directory - Multitenant).
• In the Redirect URL field, provide the ACS URL provided in Service Provider Metadata tab of the plugin and click on Register button.

• Navigate back to the Overview tab of you active directory, copy the Primary Domain and keep it handy.

• Now copy the Application ID from the configured app and keep it handy.

• Navigate to Expose an API from left menu panel.

• Click the Set button and replace the APPLICATION ID URL with https://Primary_Domain/Appication-Id that you have copied previously and click on Save

• Go to the Authentication tab in the left panel and select ID Tokens (Used for implicit and Hybrid flows) option also make sure supported account types is Accounts in any orgnaizational directory (Any Azure AD directory - Multitenant) then click on Save.

• Navigate to API Permissions ⇒ Add Permission and select Microsoft Graph.

• Now click on Application permission, then search for User.Read.All once the option is selected then click on Add permissions button.

• To proceed further click on Graant Admin Consent for Demo.

• Go back to Azure Active Directory ⇒ App Registrations window and click on Endpoints.

• This will navigate up to a window with multiple URLs.
• Copy the Federation Metadata document URL to get the Endpoints required for configuring your Service Provider.

• Now paste the Federation Metadata URL in the Service Provider Setup tab of the plugin and click on fetch.

• Naviagate back to your active directory and copy Application ID URI from the Expose an API tab and paste it in the SP Entity ID/ Issuer under Service Provider Endpoints tab.

• Also replace the SAML Login URl and SAML Logout URl with https://login.microsoft.com/common/saml2 then click on save.

2. Steps to configure Azure Multitenant Plugin

• First install the Azure Multitenant SSO plugin.
• In the Azure Multitenant plugin select the Idp from the dropdown and paste the Tenant IDs that you want to configure then click on save.

• To get the Tenant ID for the required office 365 account, navigate back to the Azure AD portal. Click on the Overview tab and copy the tenant ID value as displayed in the below screenshot.

• Now, ask all the tenant administrators to perform the SSO first and grant the required permissions to the application.

• Now you can test the SSO in an Incognito window to confirm if the Single Sign-On for multiple tenants is configured correctly.
• You have successfully configured Azure AD Multitenant SSO for achieving Azure AD SSO login into your WordPress Site.

In this Guide, you have successfully configured Azure Multitenant SSO for WordPress using the miniOrange SAML Single Sign-On (SSO) Login plugin. With Azure AD as the Identity Provider and WordPress as the Service Provider, users from multiple Azure AD tenants can securely access your WordPress site using their existing Azure AD credentials within minutes.

Related Articles

• What is SSO?
• Azure AD SSO | Azure Single Sign On (SSO) Login
• Azure AD - Overview
• Configure Azure AD as Identity Provider (IDP) for SSO Login
• Azure Multitenant Single Sign On (SSO) login in WordPress (WP)
• Does the SAML SSO plugin support IDP (Azure AD) initiated SSO?
• How to configure Single Logout (SLO) in Azure AD with SAML SSO Plugin?
• How to assign WordPress roles to users according to the groups in Azure AD?
• How to Configure Attribute Mapping in SAML SP Multiple IDP Plugin?
• How to Configure Role Mapping in SAML SP Multiple IDP Plugin?
• Frequently Asked Questions

Why Our Customers choose SAML SSO Plugin for WordPress?

24/7 Support

Get prompt support from our technical experts, accessible around the clock for direct assistance

 Sign Up

Customer Reviews

Unbiased Reviews that speak for themselves. Click below to check our more.

 Reviews

Easy Setup

Easily set up the plugin with access to our detailed knowledge base, comprehensive guides & instructional videos.

 Know More