Microsoft Azure AD (SAML) realm: SAML details

Set up a Microsoft Entra ID (SAML) realm to enable user authentication through passive or active methods with integration between the Secure Firewall Management Center and Azure AD and identity providers.

This task discusses the first step in a multi-step wizard that creates a Microsoft Azure AD (SAML) realm. You must complete all steps in the wizard to set up your realm. The steps are different depending on whether you create the realm for active or passive authentication.

Before you begin

Complete all tasks before you create your realm:

(Passive authentication with Cisco ISE only.) If you're using Cisco ISE as the repository for users and groups, set up ISE:
- How Entra ID and Cisco ISE authentication with resource owned password credentials works
- How Entra ID and Cisco ISE authentication works with TEAP/EAP-TLS
To use Entra ID as the repository for users and groups, see Configure Microsoft Entra ID for passive authentication.
Get required information for your realm as discussed in Get required information For Your Microsoft Azure AD realm.

Follow these steps to configure a Microsoft Entra ID (SAML) realm:

Procedure

Step 1

Step 2

Click Policies > Firewall Threat Defense > Integrations > Other Integrations > Realms.

Step 3

Click Add Realm > SAML - Azure AD.

Step 4

Enter the required information.


Item	Description
Name	Unique name to identify the realm.
Description	(Optional.) Description of the realm.
Identity Provider	Always displays Azure AD.
Configuration Type	Click one of these options: Passive Authentication with ISE for passive authentication. Passive authentication or captive portal with Azure AD for to use Entra ID as a user store for either passive authentication or active authentication (that is, captive portal).

Step 5

Click Next.

The realm creation wizard advances to the next step based on your selected configuration type.

What to do next

Continue with one of these tasks:

Passive authentication: Microsoft Azure AD (SAML) realm: Azure AD details.
Active authentication: Microsoft Azure AD (SAML) realm: SAML service provider (SP) metadata.