SAML (Azure AD) with multiple Organizations

[ksumann]

Hello everyone,

are there any suggestions for implementing SAML with multiple organization?
My idea was to create specific roles for each organization (like: ORG_ABC_write, ORG_DCF_read) but users who have rights in multiple orgs should see them after the initial login.

We followed this instructions: https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Configuring_SAML_S...

But users who have assigned multiple roles usually sees only one organization after login.

Thanks

[double_virgule]

Are the multiple organizations in one Azure tenant? 

Edit: Sorry, today must be a second Monday. I reread your question. To my understanding, the SAML connection link is different for each Cisco Meraki organization. Do you see a different SSO config url for the different organizations? 

[ksumann]

Hi,

yes. The organization settings menu gives me another replay url for each organization.

[double_virgule]

I wonder if you need to create a different EA for each organization and map it that way. I don't know how the interplay for users would work on that, but it might be a requirement, especially if the URLs are different for each org.