I am currently trying to setup a service provider using a SAML library to provide Single Sign On using credentials that have been synchronised from an On Premise Active Directory environment to Azure AD. We have successfully got this working with Shibboleth but Azure AD is causing me problems. The service provider allows me to specify a logon URL which I'm expecting to be an Azure AD address and an assertion service address which Azure will use to send the authentication response to. This is hosted in IIS so the options are configurable but I'm struggling to figure out what details I need to enter.
Is this even possible with Azure without implementing full ADFS? The closest I have got is using the custom application in the gallery but I need to connect directly to the new application directly to pass a SAML request from Azure to my service provider but instead I have to load the access panel first which isn't working for me.
If anyone has got any advice on this then it would be very much appreciated.
Regards
Chris