SSO with Azure Entra ID as SP for white labels

Precondition: There must be an Azure Entra ID (formely known as Azure Active Directory) already in place.

Find below a simple description of how to get the integration data we need (if more details needed, it can be discussed and extended on a video call)

Create a new app registration:
How to create a new app registration
Write a name for the app (for example, ault.sso.courseticket.com) and choose the following settings:
- Add the real production URL as Redirect URI (selecting Web as platform):
  https://domain.default.com/sp/module.php/saml/sp/saml2-acs.php/entraID
  Register an app
  Another example of UI of app registration
Set up the App ID and share it with us (we will add it as ENTRA_ID_APP_URI / entityID in our authsources file):
Share the entityID
Share with us the “Federation metadata document” endpoint from the endpoints list (we will add it as ENTRA_ID_TENANT):
Location of endpoints list
Federation document URL to be shared
Besides this setup. We need the following users with access to Active Directory (please share with us the email addresses):
- Email address and password of a new user we can use to test the integration. This user should be as similar to a real user as possible (using the same domain, user claims and parameters)
- Email address (no password needed) of the user that will be used to log in with the main seller account.
- Email address (no password needed) of the user that will be used to log in with the super admin account (this is optional if super admin account access is needed)