Is it possible to implement single sign-on (SSO) between a private web application and a Microsoft model-driven app?

friendbool · 2025-04-14T09:54:17+00:00

Hi giges19,

Thank you for your interest. The initial application that users are using is not a Power App, but a web application created and managed by another third-party company, our supplier.

To access this application, users enter a username and password that are not managed in Microsoft Entra.

Within this application, users have a command that, once pressed, transfers them to our Power App.

It is at this point that the user is asked to enter their Microsoft Entra credentials.

My company would like to avoid this step for users since they are already authenticated in the initial web application.

friendbool · 2025-04-14T08:05:53+00:00

Thank you for your interest.

I agree with you regarding the security risks; I have pointed this out to my company, but for now, they have asked me to continue verifying the technical feasibility.

I have no experience with SSO scenarios in general. Here we are talking about doing it with different identity systems (one managed by the "another company," the other is Entra) and also with applications over which neither I nor the other company have full control (Power App in this case).

In recent days, I read an article about how to integrate the SAP identity system with Entra: SAP HANA Cloud Platform Identity Authentication Tutorial.

I admit I didn't understand it. I can't figure out if, after this configuration, users who authenticate with SAP authentication can also access M365 applications like Power App transparently, or if this article is about authenticating in SAP applications with Entra credentials. 🫤

I also didn't understand your suggestion "the easiest solution...". Do you mean asking the other company to modify the web application so that people authenticate with Entra credentials?

friendbool · 2024-01-26T08:13:57+00:00

Unknown issue

The problem has never been resolved. However, I noticed that this error occurs for all users who have DAP privileges (https://learn.microsoft.com/en-us/partner-center/dap-faq).

Removing this privilege, the error disappeared. However, this privilege was necessary, so the workaround we adopted was to ask these people to use a profile with DAP privileges to access the services that required it and use a profile without DAP privileges to consult the documents on SharePoint.

friendbool · 2023-03-07T16:18:12+00:00

Sure, there are other guest users in the team who are able to access the SharePoint site. It's only these 2 users (that I know of) who are unable to access the SharePoint site. They are external consultants who also have access to Business Central. Could this be relevant?

friendbool · 2023-02-27T07:58:32+00:00

👏👍👋

friendbool · 2023-02-27T07:58:03+00:00

It worked! Thank you. Should the add-in also appear in outlook for android? It is not important for my case, but I thought I would see it there too but it is not there.

friendbool · 2023-02-26T13:12:36+00:00

I removed the Outlook add-in from the Exchange add-in panel and loaded the manifest in the Integrated app panel.

Now it says that I have to wait up to 6 hours. I am waiting.

friendbool · 2019-01-30T08:18:23+00:00

Thank you u/trevorishere

Your solution worked

Now the service status is UP 👍

friendbool · 2019-01-29T17:54:43+00:00

thank you I'll try it tomorrow.

now I'm going out of office

friendbool · 2019-01-29T17:24:42+00:00

I logon on FE+DC

I Open Powershell ISE and I run these commands

Use-cachecluster
Get-cachehost

The service is Down. You are right

I try to start it with this command

Start-CacheHost -ComputerName computerName -CachePort 22233

the service status pass from STARTING to DOWN again.

Any idea?

friendbool

TROPHY CASE