In case of a federated domain, the login page then initiates a redirect to the federation server, such as ADFS. This page waits for users to enter their username then, as soon as the focus moves away from the username field, it makes a server call to look up the configuration for the user's domain. In the cases above, apps direct users to Azure AD's common endpoint, and Azure AD shows a generic sign-in page. It also happen with pretty much every rich-client apps, such as the latest Microsoft Office apps on iOS and Android. That's because, in both cases, Azure AD doesn't know the user's tenant (or identity provider) when it's asked to sign users in, and therefore needs to perform "Home Realm Discovery". This is the most common sign-in experience with web apps that are accessed at a generic URL such as : in this case, the sign-in page starts by showing generic branding, then fades in the organization's branding after users enter their username. A variation of this experience happens for organizations that use Azure AD's cloud-hosted sign-in pages and have configured This typically happens to users in large organizations that have federated their on-premises infrastructure to Azure AD. You're probably already experienced Azure AD's "two sign-in pages" experience: you visit a website (say, SharePoint Online), get redirected to Azure AD's sign-in page, enter your username and get redirected again to another sign in page where you enter your password. When you build SaaS apps that trust Azure AD for authentication, it's easy to land your users on a customized Azure AD login page or directly on their federated STS page, like ADFS. It's relatively straight forward to do this, so I've asked Ariel Gordon, the PM in my team who owns our custom login pages, to walk you through how this works. One of the question we're hearing regularly from our developer community is "How can I optimize the sign in experience to my app so that end-users immediately land on the sign-in page for their organization?" First published on CloudBlogs on Feb, 11 2015
0 kommentar(er)
