Azure SAML App registration

We can easily configure SAML app in Azure. Goto Enterprise Application ->  New Application. Then select "Create your own appllication". Provide a name and select "". 

Click "create". After that you will be directed to the new app. Goto "Single sign on" and click on SAML. 

And then click on "Edit"

Provide the Identifer (a unique id) for your application.  

Reply Url is the endpoint Entra will send the token to upon successful login. 

Click on "Save".  You will be prompted to test this application. Click "Yes" to test the application. 

So you will go through the standard process of signing into Entra - then you can see you will be redirected to http://lolcalhost:4000 with a SAML response. The SAML reponse is the token issued and you can validate that by using powerhell:-

[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String("YOUR_BASE64_STRING"))

Next step, is to expose your REPLY URL endpoint and then use a package to decode and validate the SAML  For example in dotnet you might use "ITfoxtec.Identity.Saml2".