Power Apps portals simplified identity provider configuration – generally available

We are happy to announce the general availability of simplified identity provider configuration experience for Power Apps portals.

The configuration experience has been in preview  since the beginning of 2020 release wave 1, and is now generally available with added support for configuring the identity providers based on the following protocol specifications:

• OpenID Connect
• SAML2.0
• WS-Federation

This post provides a re-cap of the capabilities and an overview of the newly added ones!

Overview

Power Apps portals supports variety of identity providers such as Azure Active Directory, and Azure Active Directory B2C, as well as authentication protocols such as OpenID Connect, OAuth 2.0 (Microsoft, Google, LinkedIn, Twitter, Facebook configured via OAuth 2.0), SAML 2.0 and WS-Federation.

Configuring authentication providers is a widely used capability of portals that enables internal and external user authentication scenarios. Setting up this requires know-how of provider configuration and traditionally been done using portal site settings using the Portal Management model-driven app.

With this feature we are introducing a simplified experience to create and manage authentication settings and identity provider configuration. The experience aims to provide better discovery of supported providers, in-app guidance for makers / administrators to do this quickly and reduce common configuration errors. We have also refreshed portals authentication documentation to support this new experience.

Simplified experience capabilities

• Access authentication settings from Apps or Home section
  • Select portal Settings and then select Authentication settings

Or via Details page, select See all in the Identity providers section

• A providers list page provides easy discovery and management of supported identity providers and protocols for portal makers and administrators.
  • Directly manage Azure Active Directory B2C, OAuth 2 (Facebook, LinkedIn, Google, Twitter, Microsoft) from the list itself

• New with this release, configure OpendID Connect, SAML 2.0, WS-Federation based providers by choosing Add provider > Other providers 

• Configure identity providers with in-app guidance and help.

• • Contextual information with info icons for each setting and guidance on steps with learn more links.
  • Mandatory settings are distinguished for configuring the identity provider quickly with minimum settings.
  • Input validation for common types such as identifiers and URLs ensures that incorrect values are not entered during setup and can avoid unnecessary troubleshooting later.

• Actions such as enable / disable providers, setting a default provider (including Local Sign-in and Azure Active Directory).

• General authentication settings allow you to enable / disable external login and open registration options on the portal.

• Documentation with updated examples and FAQs is refreshed to use this as the default experience

Learn more and get started configuring identity providers with portals here