ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.
Support / SUP-964

Kelderby: do we really need 25 applications in Entra ID?

Project
Support
Type
Question
Status
Done Done
Priority
Medium
Organization
Kelderby
Reporter
Henrik Lund <henrik.lund@kelderby.example>
Assignee
Clara Rossi <clara.rossi@acme-hq.example>
Labels
kelderbysingle-sign-on
Components
identity-service
Created
17 Jun 2026, 09:00 UTC
Updated
18 Jun 2026, 12:00 UTC
Resolved
18 Jun 2026, 12:00 UTC

Description

I read your SAML details. 25 enterprise applications in Entra ID for 25 depots, each with its own certificate. Is there really no way to use one application for all?

Linked issues

Comments (5)

Clara Rossi · 17 Jun 2026, 09:30 UTCInternal note

Marek, Henrik asks about one app instead of 25. Is it as Tom told them?

Marek Nowak · 17 Jun 2026, 11:10 UTCInternal note

Yes. One SAML connection per client on the IdP side, but each depot has its own cert and sign-in address and its own switch, so Entra ID needs an app per depot. Changing that isn't small.

Clara Rossi · 17 Jun 2026, 12:00 UTC

Hi Henrik, today, yes: each depot has its own certificate and sign-in address on our side, so Entra ID needs one application per depot. It's also what lets each depot switch on its own weekend.

To make it less work: we'll send the details for all 25 depots in one sheet, in the order you'll set them up, and the seven pilot depots come first.

Henrik Lund · 18 Jun 2026, 11:40 UTC

OK. One sheet helps. We'll start with a test tenant before touching production.

Clara Rossi · 18 Jun 2026, 12:00 UTC

Good plan. Closing; the sheet comes this week.