Identity Providers

The Delinea Platform supports integration with external identity providers (IdPs) for user authentication and directory browsing. Choose the integration type that fits your organization's environment.

Supported Identity Providers

Entra ID (Microsoft)

The Delinea Platform supports two approaches for Entra ID integration:

  • Entra ID API Integration (Registered App) — Recommended. Uses Microsoft Graph APIs to browse Entra ID users and groups and configure login. When you enable Log-in to Entra ID on the registered app, configure the federation provider to use SAML. No separate, manually configured federation provider is required. If your organization requires OIDC, you can change the protocol on the federation provider after saving. See Entra ID API Integration.

  • Entra ID SAML/OIDC Federation — Manually configure a federation provider for Entra ID without using the registered app. Use this option only if you have a specific reason not to use the API integration. See Entra ID SAML/OIDC Federation.

You cannot use Entra ID API integration and SAML/OIDC Entra ID federation on the same Entra ID tenant at the same time. Attempting to configure both returns a blocking error. For details, including the exact error message and switching instructions, see Entra ID API Integration FAQs.

Okta

Connect the Platform to Okta for SAML or OIDC-based authentication. The Platform supports Okta as a standalone federation provider. See SAML/OIDC Federation with Okta.

Active Directory

Connect the Platform to your on-premises Active Directory (AD) domain using the AD Connector. The AD Connector syncs users and groups from AD to the Platform and supports AD-based authentication. See AD Connector.

Local Users

Users created directly in the Platform without a linked external identity source. Local users authenticate with Platform-managed credentials. See Local Users.

Generic SAML/OIDC

The Platform supports any standards-compliant SAML 2.0 or OIDC identity provider through the generic federation provider. See Generic SAML/OIDC Federation.

Choosing an Integration

Use the following guidance to select the right integration for your organization:

  • If your users sign in with Microsoft accounts, use the Entra ID API integration (registered app). It provides API-based directory access and login. Configure the federation provider to use SAML when setting up the registered app.

  • If your users sign in with Okta, use the Okta federation provider.

  • If your users are on-premises Active Directory users, use the AD Connector.

  • If you use a different identity provider, use the generic SAML/OIDC federation provider.

Related Topics