Create the Service Provider (SP) metadata for a Power App using the following template:

SP Metadata
<?xml version="1.0" encoding="UTF-8" ?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://power-app-service-provider-realm">
       <SPSSODescriptor WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
              <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
              <AssertionConsumerService 
                   Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                   Location="https://power-app-assertion-consumer-service-url"
                   index="0" isDefault="true">
               </AssertionConsumerService>
               <SingleLogoutService
                   Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                   Location=""/>
        </SPSSODescriptor>
</EntityDescriptor>

Replace the following text

  • power-app-service-provider-realm
  • power-app-assertion-consumer-service-url

with the Power App's real settings as illustrated below:

Below is a real example:

<?xml version="1.0" encoding="UTF-8" ?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://deepnettest.powerappsportals.com">
<SPSSODescriptor WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
<AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://deepnettest.powerappsportals.com/signin-saml_2"
index="0" isDefault="true">
</AssertionConsumerService>
<SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location=""/>
</SPSSODescriptor>
</EntityDescriptor>




  • No labels