Multiple IdP to same Azure AD Tenant

Secure Private Access (ZPA) Authentication
1

Does anyone know how to configure multiple IdP configurations to the same Azure AD tenant? I am getting a warning message that the IdP Entity ID cannot be the same.

“A resource already exists with the field value https://sts.windows.net/xxxxxxxxxxxxxxx”

This seems to be unique to the Azure tenant. Even though I am setting up a new IdP using a XML and certificate.

We have a need to create 2 IdPs, one that uses UPN as the required claim and the other that uses EMAIL as the required claim.

Thanks

2

Not an Azure expert myself, but you can have Azure generate unique Entity IDs. If I remember correctly this is the proper way to do it:

Screenshot 2023-05-22 at 10.40.50 XLubXpyT
Screenshot 2023-05-22 at 10.40.50 XLubXpyT3360×1892 463 KB

1 Like
3

Hi Pete, that did the trick! Much appreciated, I was able to import the new Federation Metadata XML after editing it to include the new application ID, then a new IdP was created. Once the arbitrary domain option was enabled for this new IdP, external users can authenticate. Thanks again!

1 Like