Non-active directory users need authentication/SSO

Olivia Escalle 0 Reputation points
2024-02-27T21:28:27.41+00:00

Hi - Im looking for a license type or service provided that satisfies the ability to have non-active directory employees (ie: seasonal or temp employees) logging into an application via SSO. is there a way to do this so that you do not have a full O365 license per user (they don't have an email), and you can provision the account based off role type. Thanks

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
708 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,131 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andy David - MVP 144.2K Reputation points MVP
    2024-02-28T12:09:35.5+00:00

    There is no license requirement for users ( Members or guests) to create or logon to a SSO application. The application itself may have license requirements, but the access itself is not licensed: https://video2.skills-academy.com/en-us/entra/identity/enterprise-apps/add-application-portal-setup-sso#prerequisites When you say "non-active directory" , I assume you mean guests in Azure? As far as the lack of an email, an email is not required for SSO. Your app can use UserPrincipalName or any ohter unique value to auth and if it requires an email address , you could add the SAML claim in the Azure app to set UPN to EMail as a workaround for example.

    0 comments