Partner portal federated authentication

Question

If I configure the partner site for authentication against Entra ID (formerly Azure AD), will local accounts still work? Asking in the event there is a communications issue with Microsoft.

What happens if there are duplicate user names? I'm manually configured with a login to the partner portal but I'm adding Entra ID and I have credentials there also.

Updated the tags
[edited by: Gladys at 2:38 PM (GMT -8) on 1 Jan 2024]

DavidSain · Accepted Answer

Got it worked out. You click Add an identity provider, which tells you to add an identity provider. 
 
 You click the link to in that article to the next article "Use Microsoft Entra ID (Azure AD) as an identity provider". This page does NOT tell you how to do that on the Microsoft side, you have to scroll to the bottom and go to the next one, "Configure Microsoft Entra ID (Azure AD) to allow users to sign in using UPN). On Step 10, click Save and you are supposed to be able to sign in? Nope. Then you have to back to the article "Add an identity provider" where it tells you to turn it on. 
 I don't know who wrote this but it's messy! 
 Thanks, 
 David

Qoosh · Answer

Hi David , 
 Thanks for reaching out. 
 When Federated login is set up, the email address associated with the Entra ID will need to match that of the Admin in the Sophos Partner Dashboard or Sophos Central. This avoids issues with duplicated usernames. 
 The options on the sign-in settings page allow you to specify: 
 
 Sophos Central Admin Credentials only 
 Federated credentials only 
 Sophos Central Admin or Federated credentials 
 
 Let me know if this helps.

Partner portal federated authentication

Top Replies