Domainless SAML IdP federation for workforce tenants

Domainless SAML federation with a SAML Identity Provider allows external users to authenticate into your apps or workforce resources using their IdP-managed credentials, regardless of their email domain. Domainless federation removes the need for domain matching between the user's email and preconfigured IdP domains during sign-in or invitation redemption. Learn more at Add a SAML/WS-Fed identity provider - Microsoft Entra External ID.

Affected: Microsoft Entra ID, B2B

Related changes

• Microsoft Entra ID federation with External ID (EEID) · Federation
• App-based branding via Branding themes in Microsoft Entra tenants · Tenants
• External users can be directly assigned to Access Packages · Microsoft Entra ID
• Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows · Microsoft Entra ID
• BYOD support for Windows client using Entra registration · Microsoft Entra ID
• Jailbreak/Root Detection in Authenticator App · Microsoft Entra ID

View at Microsoft → Copy summary