How to let a group of users to access Salesforce Enterprise Application which is being configured for SSO using Microsoft Entra Id.

Question

I'm a beginner at Microsoft Entra ID, but I have successfully configured SSO for Salesforce Application. Now I can make the Microsoft entity user to login Salesforce with the help of Microsoft account credentials instead of Salesforce Credentials.

However, I'm facing issues when I try to access Salesforce with other users created in Microsoft Entra ID.

To make it look practically simple ,imagine this way.

UserA - whose identity is MicrosoftAccount

I have created two other users in Microsoft Entra ID say UserB and UserC, and now I want to provide the users access to the Salesforce Application through Microsoft Entra ID.

How should I do that and what role should I assign to the users so that they can access Salesforce through Microsoft Entra ID SSO.

Help me solving the issue I'm facing.

Answer 1

Typically you would require user assignment to the app, then assign the users or groups that are allowed.

To do this:

In the Azure portal require assignment under the app properties:

Then assign the users or groups

Note that nested groups will NOT work!

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal?pivots=portal

Answer 2

Hi @Mohammed Hasim , to provide access to Salesforce through Microsoft Entra ID SSO for UserB and UserC, you need to create an access package in Azure AD entitlement management and add Salesforce as a resource to it. Then, you can assign the access package to UserB and UserC.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James