How to Set Up Azure AD SSO / Microsoft Entra ID for WordPress Using the miniOrange SAML Single Sign On Plugin (Single Sign On)?

• Log in to Azure AD Portal
• Click on More services.

• Search and select Microsoft Entra ID.

• Select Enterprise Application.

• Click on New Application.

• Click on Create your own Application.

• Enter the name for your app, then select Non-gallery application section and click on Create button.

• Click on Set up single sign on.

• Select the SAML tab.

• After clicking on Edit, enter the SP Entity ID for Identifier and the ACS URL for Reply URL from Service Provider Metadata tab of the plugin.
  Note: For IDP-initiated SSO, the Sign On URL should be left blank.

• By default, the following Attributes will be sent in the SAML response. You can view or edit the claims sent in the SAML response to the application under the Attributes tab.

• Copy the App Federation Metadata Url to get the Endpoints required for configuring your Service Provider.

Assign users and groups to your SAML application

• Navigate to Users and groups tab and click on Add user/group.

• Click on Users to assign the required user and then click on Select.

• After selecting users click on Assign button.

• You can also assign a role to your application under Select Role section.
• You have successfully configured Microsoft Entra ID / Azure AD as SAML IDP ( Identity Provider) for achieving Azure AD SSO.