How to use Spid authentication for Microsoft 365

Question

This authentication method is necessary to allow Italian citizens to authenticate themselves with the credentials issued by the Italian government https://www.spid.gov.it/en/.

The application is for students of the University of Brescia

Answer 1

Hello @Andrea Angelo Marinoni,

Thank you for posting your query on Microsoft Q&A.

Based on your description, I understand that you want to enable your users to log in to your tenant using SPID as an Identity Provider. As you confirmed, SPID uses SAML v2.0 as its authentication protocol.

To federate your Microsoft 365 users' identities with SPID, you need to establish communication between SPID, your SAML 2.0 identity provider, and Microsoft Entra ID. Typically, the relying party ID should be set to match the entityID from the Microsoft Entra metadata. To enable SPID as an Identity Provider (IdP), you must add or configure a domain to establish trust between the SAML 2.0 IdP and Microsoft Entra ID.

I recommend reviewing the following documents, which outline the steps to configure a SAML 2.0 IdP for Single Sign-On (SSO) with Microsoft 365 users:

• Set up a SAML 2.0 identity provider for SSO

If you are looking to set this up for external identities, you can refer to this document. Note that specific attributes and claims must be configured at the IdP to support federation:

• Federation with external identities

To complete this setup, we can connect offline to explore the best approach and possibilities for federating identities with the SPID provider. I will coordinate with Navya to schedule a meeting. Please let us know your availability for the discussion.

Thanks,
Raja Pothuraju.