Discusses new feature releases of Microsoft Single Sign-on for Linux

1. In the message that appears asking if you want to continue, select **Yes**.

manager: CelesteDG

Learn how to configure single sign-on between Microsoft Entra ID and Adobe Creative Cloud.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.


* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

> [!VIDEO ab3feca1-0ca8-46e6-90a1-76704fdbd844]

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

The scenario outlined in this article assumes that you already have the following prerequisites:

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

The scenario outlined in this article assumes that you already have the following prerequisites:

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

The scenario outlined in this article assumes that you already have the following prerequisites:

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location: the Azure portal.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

The scenario outlined in this article assumes that you already have the following prerequisites:

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location by using the Azure portal.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location: the Azure portal.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

The scenario outlined in this article assumes that you already have the following prerequisites:

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

The scenario outlined in this article assumes that you already have the following prerequisites:

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Control in Microsoft Entra ID who has access to a GitHub Enterprise Account and any organizations within the Enterprise Account.

* Manage your accounts in one central location.

* Manage access to your GitHub Enterprise Cloud Organization in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location: the Azure portal.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

- Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Enable your users to be automatically signed-in to Hubble with their Microsoft Entra accounts.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location: the Azure portal.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location: The Microsoft Entra admin center.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

1. In the **Add from the gallery** section, type **4DX** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **ACLP** in the search box.

1. In the **Add from the gallery** section, type **Adaptive Insights** in the search box.

1. In the **Add from the gallery** section, type **ADEM** in the search box.

1. In the **Add from the gallery** section, type **Adra by Trintech** in the search box.

1. In the **Add from the gallery** section, type **Ahrtemis** in the search box.

1. In the **Add from the gallery** section, type **AMMS** in the search box.

1. In the **Add from the gallery** section, type **Anyone Home CRM** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Arena** in the search box.

1. In the **Add from the gallery** section, type **Articulate 360** in the search box.

1. In the **Add from the gallery** section, type **Asana** in the search box.

1. In the **Add from the gallery** section, type **ASC Contracts** in the search box.

1. In the **Add from the gallery** section, type **Ascentis** in the search box.

1. In the **Add from the gallery** section, type **AsignetSSOIntegration** in the search box.

* Manage your accounts in one central location.

1. In the **Add from the gallery** section, type **Authomize** in the search box.

* Manage your accounts in one central location, the Azure portal.

**Note:** When using AWS Organizations, it's important to delegate another account as the Identity Center Administration account, enable the IAM Identity Center on it, and set up the Entra ID SSO with that account, not the root management account. This ensures a more secure and manageable setup.

1. In the **Add from the gallery** section, type **BMIS - Battery Management Information System** in the search box.

1. In the **Add from the gallery** section, type **Beatrust** in the search box.

1. In the **Add from the gallery** section, type **BenefitHub** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Birst Agile Business Analytics** in the search box.

1. In the **Add from the gallery** section, type **Blue Access for Members (BAM)** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Capriza Platform** in the search box.

1. In the **Add from the gallery** section, type **Ceridian Dayforce HCM** in the search box.

1. In the **Add from the gallery** section, enter **Change Process Management** in the search box.

1. In the **Add from the gallery** section, type **Cheetah For Benelux** in the search box.

1. In the **Add from the gallery** section, type **ChronicX®** in the search box.

* Manage your accounts in one central location.

1. In the **Add from the gallery** section, type **Cisco Webex Meetings** in the search box.

1. In the **Add from the gallery** section, type **Clarizen One** in the search box.

1. In the **Add from the gallery** section, enter **Cloud Academy** in the search box.

1. In the **Add from the gallery** section, type **Cloud Service PICCO** in the search box.

1. In the **Add from the gallery** section, type **CompetencyIQ** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Condeco** in the search box.

1. In the **Add from the gallery** section, type **Contentkalender** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Cincom CPQ** in the search box.

1. In the **Add from the gallery** section, type **Crayon** in the search box.

1. In the **Add from the gallery** section, type **CrowdStrike Falcon Platform** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Curator** in the search box.

1. In the **Add from the gallery** section, type **CWT** in the search box.

1. In the **Add from the gallery** section, type **Cyara CX Assurance Platform** in the search box.

1. In the **Add from the gallery** section, type **Cytric** in the search box.

1. In the **Add from the gallery** section, type **deBroome Brand Portal** in the search box.

1. In the **Add from the gallery** section, type **ERA_EHS_CORE** in the search box.

1. In the **Add from the gallery** section, type **Evovia** in the search box.

1. In the **Add from the gallery** section, type **ExcelityGlobal** in the search box.

1. In the **Add from the gallery** section, type **Fidelity PlanViewer** in the search box.

1. In the **Add from the gallery** section, type **FigBytes** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Folloze** in the search box.

1. In the **Add from the gallery** section, enter **FortiGate SSL VPN** in the search box.

1. In the **Add from the gallery** section, type **FortiSASE** in the search box.

1. In the **Add from the gallery** section, type **Framer** in the search box.

1. In the **Add from the gallery** section, type **FreshGrade** in the search box.

1. In the **Add from the gallery** section, type **gamba!** in the search box.

1. In the **Add from the gallery** section, type **GitHub Enterprise Server** in the search box.

1. In the **Add from the gallery** section, type **GoalQuest** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Grok Learning** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **HackNotice** in the search box.

1. In the **Add from the gallery** section, type **Halosys** in the search box.

1. In the **Add from the gallery** section, type **Headspace** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Hive Learning** in the search box.

1. In the **Add from the gallery** section, type **HR2day by Merces** in the search box.

Manage your accounts in one central location: the Azure portal.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Infinite Campus** in the search box.

1. In the **Add from the gallery** section, type **Infogix Data3Sixty Govern** in the search box.

1. In the **Add from the gallery** section, type **Infrascale Cloud Backup** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

- [Privileged Role Administrator](~/identity/role-based-access-control/permissions-reference.md#privileged-role-administrator)

The scenario outlined in this article assumes that you already have the following prerequisites:

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **NICE CXone** in the search box.

1. In the **Add from the gallery** section, type **Nomadesk** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **NS1 SSO for Azure** in the search box.

1. In the **Add from the gallery** section, type **OneTrust Privacy Management Software** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **Opal** in the search box.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

1. In the **Add from the gallery** section, type **PageDNA** in the search box.

1. In the **Add from the gallery** section, type **Palantir Foundry** in the search box.

A Microsoft Entra documentation page was updated: Adobe Creative Cloud Tutorial.

Use tenant restrictions to control the types of external accounts that users can use on your networks and the devices that you manage.

author: omondiatieno

* Manage your accounts in one central location.

| App or service | Limitations |

- Confluence: 6.0.1 to 6.15.9

A Microsoft Entra documentation page was updated: Sso Wizard.

author: rwike77

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [User Administrator](~/identity/role-based-access-control/permissions-reference.md#user-administrator).

author: henrymbuguakiarie

author: henrymbuguakiarie

author: OwenRichards1

author: Dickson-Mwendia

author: cilwerner

author: henrymbuguakiarie

You can manage the [Microsoft Entra Joined Device Local Administrator](~/identity/role-based-access-control/permissions-reference.md#microsoft-entra-joined-device-local-administrator) role from **Device settings**.

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Groups Administrator](~/identity/role-based-access-control/permissions-reference.md#groups-administrator).

manager: CelesteDG

1. Sign into the Microsoft Entra admin center as a Global Administrator.

Apply default token lifetime variation to organizations that have Continuous Access Evaluation (CAE) enabled. Apply default token lifetime variation even if the organizations use CTL policies. The default token lifetime for long lived token lifetime ranges from 20 to 28 hours. When the access token expires, the client must use the refresh token to silently acquire a new refresh token and access token.

author: OwenRichards1

Overview of Single Sign-on for Linux for Microsoft Entra ID registered devices.

You are an IT Admin for the company "Contoso" with the primary tenant of "Contoso.com." To secure data in the central Contoso tenant, you need to ensure users and applications with privileged access to your tenant are in tenants that properly secure these resources. Likewise, you want to ensure that external tenants in which your tenant has permissions into are known and following secure practices. To secure Contoso, you want to find all tenants that have inbound or outbound relationships with your primary tenant.

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

> This document is only relevant if you're using the [Original User Model](https://docs.newrelic.com/docs/accounts/original-accounts-billing/original-users-roles/overview-user-models/) in New Relic. Please refer to [New Relic (By Organization)](new-relic-limited-release-tutorial.md) if you're using New Relic's newer user model.

To learn more about SaaS app integration with Microsoft Entra ID, see [What is application access and single sign-on with Microsoft Entra ID](~/identity/enterprise-apps/what-is-single-sign-on.md).

author: MicrosoftGuyJFlo

author: cilwerner

author: henrymbuguakiarie

For devices which are Entra-joined or Entra-registered, Entra ID generates a multi-application Refresh Token used for application SSO, also known as the [Primary Refresh Token (PRT)](concept-primary-refresh-token.md).

Microsoft embeds specific identifiers in all access tokens that enable the correlation of activities back to a single root authentication event. These linkable identifiers are surfaced in customer-facing logs to support threat hunters and security analysts in investigating and mitigating identity-based attacks. By leveraging these identifiers, security professionals can more effectively trace, analyze, and respond to malicious activity across sessions and tokens, enhancing both the transparency and security of the environment.

IRSF poses a significant threat to online businesses and can cause reputational damage. By understanding IRSF, you can be more aware of the problem and can engage in implementing preventive measures such as regional restrictions, rate limiting, and phone number verification.

1. In the **Add from the gallery** section, type **Forcepoint Cloud Security Gateway - User Authentication** in the search box.

Learn how to sign in to an Azure virtual machine or Arc-enabled Windows Server that's running Windows Server by using Microsoft Entra authentication.

> [GitHub Enterprise Managed Users](https://docs.github.com/enterprise-cloud@latest/admin/authentication/managing-your-enterprise-users-with-your-identity-provider/about-enterprise-managed-users) is a feature of GitHub Enterprise Cloud which is different from GitHub Enterprise's standard SAML SSO implementation. If you haven't specifically requested EMU instance, you have standard GitHub Enterprise Cloud plan. In that case, please refer to relevant documentation to configure your non-EMU [organisation](./github-tutorial.md) or [enterprise account](./github-enterprise-cloud-enterprise-account-tutorial.md) to authenticate with Microsoft Entra ID.

1. In the **Add from the gallery** section, type **CyberArk SAML Authentication** in the search box.

This applies to Entra tenants only.

author: justinha

- *Run as* using a security key.

author: cilwerner

| Enforce attestation set to Yes | Enforce attestation set to No |

In this tutorial, set up SSPR for a set of users in a test group. Use the *SSPR-Test-Group* and provide your own Microsoft Entra group as needed:

| `LoginHint` | User name hint (upn) | Provides a hint for the user name during the sign-in process. |

Discover secretless authentication options in Azure to reduce credential risks, improve user experience, and align with zero-trust principles.

1. Browse to **Entra ID** > **App registrations**, select your application, and then **Authentication**.

Explains requirements to prepare FIDO2 hardware for attestation with Microsoft Entra ID

author: justinha

- **Multifactor authentication:** When a user signs in with MFA, several separate MFA events are actually taking place. For example, if a user enters the wrong validation code or doesn't respond in time, more MFA events are sent to reflect the latest status of the sign-in attempt. These sign-in events appear as one line item in the Microsoft Entra sign-in logs. That same sign-in event in Azure Monitor, however, appears as multiple line items. These events all have the same `correlationId`.

The **authConfig.js** file contains the configuration settings for the authentication flow and is used to configure **MSAL.js** with the required settings for authentication.

If you do not plan on testing your app in the same tenant you registered it in, or you are not an administrator in your tenant, you cannot consent to the permissions from the [Microsoft Entra admin center](https://entra.microsoft.com). You can still consent to some permissions, however, by triggering a sign-in prompt in a web browser.

author: justinha

- **Application permissions** are for service- or daemon-type applications that need to access a web API as themselves, without user interaction for sign-in or consent. Unless you've defined application roles for your web API, this option is disabled.

MSAL.js provides a `logoutRedirect` method in v2 that clears the cache in browser storage and redirects to the Microsoft Entra sign out page. After sign out, the redirect defaults to the sign in start page. For the after sign out experience, you can set the `postLogoutRedirectUri` to redirect the user to a specific URI. This URI should be registered as a redirect URI in your application registration.

Learn how to build a single-page application (sign-in)

The Microsoft Authentication Library (MSAL) supports several authorization grants and associated token flows for use by different application types and scenarios.

manager: CelesteDG

* Manage your accounts in one central location.

* Manage your accounts in one central location.

Use your Microsoft Entra account with Atlassian Confluence server to enable single sign-on. This way all your organization users can use the Microsoft Entra credentials to sign in into the Confluence application. This plugin uses SAML 2.0 for federation.

* Manage your accounts in one central location: the Azure portal.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

The scenario outlined in this article assumes that you already have the following prerequisites:

* Manage your accounts in one central location.

1. In the **Add from the gallery** section, type **SAML SSO for Bamboo by resolution GmbH** in the search box.

1. In the **Add from the gallery** section, type **Chronus SAML** in the search box.

1. In the **Add from the gallery** section, type **FourKites SAML2.0 SSO for Tracking** in the search box.

author: OwenRichards1

manager: CelesteDG

[Quickstart: Register an app in Microsoft Entra ID](quickstart-register-app.md).

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

1. In the **Add from the gallery** section, type **Datto File Protection Single Sign On** in the search box.

1. In the **Add from the gallery** section, type **Guardium Data Protection** in the search box.

author: OwenRichards1

manager: CelesteDG

* Manage your application access in one central location.

* Manage your accounts in one central location.

> For these reason you must start out with a custom non-gallery application to set up SSO when using the **Manage Single Sign-On** feature in SAP Concur.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

Alternatively, you can also use the [Enterprise App Configuration Wizard](https://portal.office.com/AdminPortal/home?Q=Docs#/azureadappintegration). In this wizard, you can add an application to your tenant, add users/groups to the app, assign roles, and walk through the SSO configuration as well. [Learn more about Microsoft 365 wizards](/microsoft-365/admin/misc/azure-ad-setup-guides).

author: cilwerner

| Language / framework | Project on<br/>GitHub | Package | Getting<br/>started | Sign in users | Access web APIs |

- **Enterprise Applications** shows non-Microsoft applications.

manager: CelesteDG

manager: CelesteDG

manager: CelesteDG

manager: CelesteDG

manager: CelesteDG

author: cilwerner

author: OwenRichards1

author: OwenRichards1

author: cilwerner

A Microsoft Entra documentation page was updated: Msal Net Use Brokers With Xamarin Apps.

A Microsoft Entra documentation page was updated: Msal Net Xamarin Ios Considerations.

How to update a JavaScript SPA using MSAL.js 2.x and the authorization code flow with PKCE and CORS support.

Learn how to acquire a token in a single-page app and call a web API using the Microsoft identity platform.

manager: CelesteDG

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

* Manage your accounts in one central location.

If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.

A best practice is a tested method or technique that helps deliver higher quality results, over time.

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Groups Administrator](~/identity/role-based-access-control/permissions-reference.md#global-administrator).

Learn how to integrate Darwinbox HR with Microsoft Entra ID to automate user provisioning, manage lifecycle workflows, and streamline HR-driven processes.

For organizations that have no established use of device code flow, blocking can be done with the following Conditional Access policy:

Cloud sync uses the Microsoft Entra provisioning agent. Use the steps below to install it.

author: shlipsey3

| Notifications | Users at risk detected alerts | No | No | Yes |

author: shlipsey3

author: shlipsey3

author: shlipsey3

* A working Microsoft Entra tenant with Microsoft Entra ID P2, or trial license enabled. If needed, [create one for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).

| Risk Detection | Availability |

1. Choose a profile name, leave “*enabled*” for State, and select a Priority.

Learn how you can use entitlement management and Global Secure Access to restrict employee access to cloud apps.

Learn how to configure verified ID settings for an access package in entitlement management.

Learn how you can use Entitlement Management and Global Secure Access to restrict employee access to cloud apps.

[Cross-cloud synchronization](cross-tenant-synchronization-configure.md?pivots=cross-cloud-synchronization) requires Microsoft Entra ID Governance or Microsoft Entra Suite licenses. For more information, see [Microsoft Entra ID Governance licensing fundamentals](../../id-governance/licensing-fundamentals.md).

- PIM alerts for Microsoft Entra roles in Microsoft Graph API - Preview.

- [Migrating users to Microsoft Entra External ID](customers/how-to-migrate-users.md)

:::image type="content" source="media/cross-cloud-settings/cross-cloud-settings.png" alt-text="Screenshot showing Microsoft cloud settings." border="true":::

manager: celestedg

New and updated documentation for the Microsoft Entra External ID.

A Microsoft Entra documentation page was updated: Whats New Docs.

$messageInfo.customizedMessageBody = "Hello. You are invited to the Contoso organization."

:::image type="content" source="media/cross-cloud-settings/cross-cloud-settings.png" alt-text="Screenshot showing Microsoft cloud settings." border="true":::

This feature also includes domain-based federation, so a user who enters an email address on the sign-in page that matches a predefined domain in any of the external identity providers will be redirected to authenticate with that identity provider.

The video covers how to integrate social identity providers like Facebook, Google and Apple into application sign-up and sign-in flows. It focuses on how you can enhance and personalize the registration experience. It also describes ways to ensure robust security and manage users efficiently using Microsoft Entra External ID.

This feature also includes domain-based federation, so a user who enters an email address on the sign-in page that matches a predefined domain in any of the external identity providers will be redirected to authenticate with that identity provider.

Learn about how to customize the browser language for your app's authentication experience to provide a personalized sign-in.

- Authentication and Data plane protection for Microsoft tenant or Consumer accounts.

Learn how Microsoft Entra B2B invitation redemption works, including guest sign-in, consent process, and privacy terms. Ensure secure access for your organization’s resources.

The following table lists the required licenses depending on your scenario.

:::image type="content" source="./media/cross-tenant-synchronization-configure/access-settings-cross-cloud-sync.png" alt-text="Screenshot of Microsoft cloud settings that shows check box to enable cross-cloud synchronization." lightbox="./media/cross-tenant-synchronization-configure/access-settings-cross-cloud-sync.png":::

:::image type="content" source="./media/cross-tenant-synchronization-configure/access-settings-cross-cloud-sync.png" alt-text="Screenshot of Microsoft cloud settings that shows check box to enable cross-cloud synchronization." lightbox="./media/cross-tenant-synchronization-configure/access-settings-cross-cloud-sync.png":::

When you select this check box, it grants an underlying service principal the following permissions:

Learn about tenant-level restrictions and controls for users, groups, and applications, along with policy management in a cloud-based portal.

A Microsoft Entra documentation page was updated: Regions that need opt in for Entra External Id MFA telephony verification (preview).

You can scope tenant restrictions v2 to specific users, groups, organizations, or external apps. Apps built on the networking stack for the Windows operating system are protected. The following scenarios are supported:

Learn to configure and establish a Secure Shell (SSH) connection using Microsoft Entra Private Access for enhanced security.

For the scenario where you need to control access to specific *critical* resources, such as highly valued servers and applications, Microsoft recommends that you add an extra security layer by enforcing just-in-time privileged access on top of their already secured private access.

Jason would also like to look into the risk factor of external apps or multitenant apps with a presence in his tenant that are registered in another organization’s tenant. Since the security posture of these apps is impacted by the posture of the owning tenant, it’s especially important to review these to identify risks and opportunities for surface area reduction. Copilot can return a list of service principals within the current tenant with a multitenant app registration outside of the user’s tenant or details on if a particular service principal is registered outside the tenant.

When you register/update an application, both an application object and a corresponding [service principal object](#service-principal-object) are created/updated for that tenant. The application object *defines* the application's identity configuration globally (across all tenants where it has access), providing a template from which its corresponding service principal objects are *derived* for use locally at run-time (in a specific tenant).

manager: CelesteDG

Learn how to access Azure Storage from a web app in Azure App Service using managed identities. Simplify security and avoid managing secrets.

Global Secure Access supports compliance across different regulated industries and global markets. This article lists the current certifications and updates as Global Secure Access acquires new certifications.

ai-usage: ai-assisted

> This information relates to a prerelease functionality that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided in this article.

author: HULKsmashGithub

| ---------- | ----------- | ------------ | ----------- | --------------- | ------- |

Learn about how Microsoft is dedicated to supporting Global Secure Access capabilities for Microsoft Azure in China.

ai-usage: ai-assisted

Secure Shell (SSH) is widely recognized across the IT industry as a critical service for system administrators. It provides a secure and encrypted method to access and manage remote systems over unsecured networks.

For detailed information about known issues and limitations, see [Known limitations for Global Secure Access](../global-secure-access/reference-current-known-limitations.md).

Learn about how Global Secure Access helps secure access to your corporate network by restricting access to external tenants.

manager: martinco

Authentication plane enforcement happens at the time of Entra ID or Microsoft Account authentication. When the user is connected with the Global Secure Access client or via Remote Network connectivity, Tenant Restrictions v2 policy is checked to determine if authentication should be allowed. If the user is signing in to the tenant of their organization, tenant restrictions policy is not applied. If the user is signing in to a different tenant, policy is enforced. Any application that is integrated with Entra ID or uses Microsoft Account for authentication supports Universal Tenant Restrictions at the authentication plane.

| Understand Microsoft Entra private network connectors | Find out more about [connector management](../identity/app-proxy/application-proxy-connectors.md) and how connectors [autoupgrade](../identity/app-proxy/application-proxy-connectors.md#automatic-updates). |

.