Cloud Secure Edge Docs

CSE Home> Public Applications

Home

Learn Cloud Secure Edge

What is Cloud Secure Edge?

Get Started

Quickstart
Solutions
Platform Components

Secure Resources

Networks
Private Resources
Public Applications
- IP Allowlisted SaaS Apps
- IdP Federated SaaS Apps
Internet Traffic
Trust Scoring

Manage Access Policies

Access Policies
Content Policies
- Internet Threat Protection

Manage and Monitor Your Org

Manage Users and Devices
Manage Admins
Visibility and Logging

More Resources

Changelog
API Guide
Cloud Secure Edge Labs
Licenses
- Editions Licenses

Use IdP Federation to Enforce Zero Trust Policies on All SaaS Applications Integrated With Microsoft Entra ID

Use federation in Microsoft Entra ID to enforce Cloud Secure Edge (CSE) policies and enable passwordless authentication for Microsoft 365 and other Entra-integrated SaaS applications

Updated On: Jul 17, 2026

Cloud Secure Edge Docs

Use IdP Federation to Enforce Zero Trust Policies on All SaaS Applications Integrated With Microsoft Entra ID

On This Page

Overview #

How It Works #

Critical warning: prevent tenant lockout before you federate #

How passwordless authentication works #

Onboarding new users with Staged Rollout #

Limitations #

Prerequisites #

Steps #

Required Microsoft Graph permissions #

References #