Blog Post

Microsoft Entra Blog
2 MIN READ

Entra ID B2B collaboration direct federation with SAML and WS-Fed providers now in public preview

Alex Simons (AZURE)'s avatar
Alex Simons (AZURE)
Icon for Microsoft rankMicrosoft
Jul 08, 2019
Howdy folks,   We’ve been making it easier to work with your partners by enabling you to collaborate with them using their existing identities, regardless of whether they use Azure AD or not. We ...
Updated Dec 04, 2023
Version 9.0
Alex Simons (AZURE)'s avatar
Icon for Microsoft rankMicrosoft
Joined May 01, 2017
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for workforce, customer, and workload identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions.
pjgroeneveld's avatar
pjgroeneveld
Copper Contributor
Nov 06, 2019

Hi NRuest ,

OK, now I understand where the limitation is.

Figure 1 assumes that the users ...@fabrikam.com is always equal to the domain used to configure the IdP, , because that is not necessarily true in all cases.

I have at least one IdP, with a directory behind it that contains mixed B2B identities with users from a (non-limited) set of domains in their userId/email address.

So, that's not going work with this setup.

Because the domain of the IdP is, for instance, allCompanies.com, but the users identify themselves with …@companyA.com, …@companyB.com etc.