SSO Settings for Microsoft 365

By default, Microsoft 365 uses PowerShell for configuring SSO.

Enter configuration settings in PowerShell

In PowerShell, type Connect-MsolService.
When prompted, enter your administrator credentials for your Microsoft 365 domain.
Run the following command:
```
Set-MsolDomainAuthentication -DomainName <domain-name> -FederationBrandName
<domain-name> -Authentication Federated -IssuerUri <entity-id> -LogOffUri
<logout-url> -PassiveLogOnUri <single sign on url> -SigningCertificate
<certificate> -PreferredAuthenticationProtocol SAMLP
```
Where:
- domain-name is the domain used for SSO.
- Logout-url is the page to be redirected for logout activities.
- Certificate is the certificate present between <ds:X509Certificate> and </ds:X509Certificate> tags. Obtain this value from the Default_idpMetadata.xml file.
- entity-id is the value from the Default_idpMetadata.xml file.
- single sign on url is the Location value from the Default_idpMetadata.xml file.
  
  Create SSO provider with downloaded metadata file for Microsoft 365
Log in to the Management Console with your administrator account credentials.
Select Administration > Enterprise Integration.
On the Configuration menu, select Single Sign-on.
On the SSO Providers tab, click New.
Enter a name.
From the prompt, select Type as the Cloud Service Provider.
From the Cloud applications prompt, select Office365 cloud.
Click the cloud icon next to the Cloud applications prompt and download the Microsoft 365 metadata file.
Upload the Microsoft 365 metadata file.
Click Validate and ensure that the Entity ID field is populated.
Click Save.

Lookout Product Documentation