title: How to use Azure AD as SAML IdP?
body: <p>I am the developer for a (non-Azure-based) webapp that primarily uses a typical email+password for login. I have some customers that want to use their corporate SSO, so I implemented SAML, which allows them to log on using their Okta credentials.</p>
  <p>Now I have a customer that would like to use their Azure AD as a IdP, and I am struggling to figure out how to configure this in Azure. I <em>think</em> that I would like to add an app to Azure's App Gallery, so that my customer can search for it, rather than being forced to create their own <code>Integrate any other application you don't find in the gallery (Non-gallery)</code> Enterprise Application. However, I am very new to the Azure ecosystem, and I am struggling to understand the difference between an &quot;Azure Enterprise Application&quot; and an &quot;App Registration,&quot; etc. Most of the online guides that I can find seem to target a system administrator that uses Azure AD, and would like to add a 3rd-party SAML Application to their account; I am struggling to find anything targeted towards those 3rd-party app developers.</p>
  <p>When I navigate to the application that I created in <code>Azure Active Directory &gt; Enterprise applications</code>, the Single Sign On tab tells me that SSO is not available for this application, and to &quot;edit the properties&quot; of my App Registration Experience, without specifying what properties prevent me from using SSO.</p>
  <p><a href="https://i.stack.imgur.com/Fwy5L.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Fwy5L.png" alt="Azure AD Enterprise Application SSO tab" /></a></p>
  <p>Could anyone point me in the right direction to registering an application and allowing my customers to use their Azure AD to single-sign-on to my application?</p>