IntegrationIntermediatessoazure-adsaml
Design Azure AD SSO integration with Salesforce
Real World Scenario
Enterprise mandates Azure AD SAML SSO for all Salesforce users with MFA enforced at IdP.
Expected Answer
• SAML 2.0 SSO configuration My Domain
• Just-in-time provisioning vs SCIM provisioning
• Attribute mapping email FederationIdentifier
• Experience Cloud separate SAML configs if needed
• Certificate rotation calendar shared with IdP team
• Logout URL single logout where supported
• Test failover IdP metadata updates
Follow-Up Questions & Answers
Click to expand — each follow-up includes a direct, interview-ready answer
Main difference: use case and scale. SAML 2.0 SSO configuration My Domain. Just-in-time provisioning vs SCIM provisioning. Pick based on your integration pattern and team capability. SSO is identity architecture—document integration user exception process separately from human SSO. Balance speed of delivery with maintainability.
Architect Perspective
SSO is identity architecture—document integration user exception process separately from human SSO.