How to obtain IdP metadata URL in MS Azure AD when we do not have a Owner?

Question

How to obtain IdP metadata URL in MS Azure AD when we do not have a Owner?

Fei Gao 0

Hi we have experienced an issue with migrating the SSO configuration as it is using MS Azure AD and we need the IdP metadata URL to complete the configuration. However when I was trying to access this information, it suggested that I do not have access, and the IT Manager who is the Owner, has recently resigned. Could you please advise me how to obtain the IdP metadata URL? or how to replace the Owner while the current Owner is no longer contactable? Thank you.

Shubham Sharma 17,925 Reputation points Microsoft External Staff Moderator

2025-11-27T20:18:32.5166667+00:00

Hello Fei Gao

Following up to see if the above provided resolution was helpful. If you have any further queries do let us know.

4 answers

Your answer

Shubham Sharma 17,925 Reputation points Microsoft External Staff Moderator

2025-11-27T20:18:32.5166667+00:00

Hello Fei Gao

Following up to see if the above provided resolution was helpful. If you have any further queries do let us know.

Answer 1

Hi, no worries at all. The tenant ID is easy to find even if you don’t have full access.

Just open this link in your browser and replace yourdomain.com with the domain you use to sign in:

https://login.microsoftonline.com/<yourdomain.com>/.well-known/openid-configuration

When the page loads, look for the value next to "issuer". Inside that URL, you will see a long GUID. That GUID is your tenant ID.

Example:

"issuer": "https://login.microsoftonline.com/12345678-abcd-1234-abcd-1234567890ab/v2.0"

In this example, the tenant ID is:

12345678-abcd-1234-abcd-1234567890ab

Once you have that ID, you can use the metadata URL exactly as I mentioned earlier.

Answer 2

Adam Zachary 2,265

You don’t need the old Owner to get the IdP metadata URL. The URL is public and always follows this format:

https://login.microsoftonline.com/<tenant-id>/federationmetadata/2007-06/federationmetadata.xml

If you don’t know the tenant ID, you can get it from:

https://login.microsoftonline.com/<yourdomain.com>/.well-known/openid-configuration

Your real problem is permissions. To update the SSO configuration, someone in your tenant must have one of these roles:

Global Administrator
Application Administrator
Cloud Application Administrator

If no one has admin access anymore because the previous owner left, you must open a support request to restore a Global Admin:

https://aka.ms/AzurePortalSupport

Choose tenant access issues and request administrator recovery.

Fei Gao 0 Reputation points

2025-11-25T02:09:23.4366667+00:00

Hi Adam, thank you for the detailed response. I could not locate the tenant ID, after I logged into Azure Group that was set up by the previous Owner. From Overview tab, I could only find Object ID. Do you know where else I could locate this Tenant ID?

Apology if this sounds like a silly question as you've already pasted a link above, which I am not quite sure how to utilise - I'm not an IT expert but was handed this task to figure out how to proceed with the migration. So highly appreciate if you could give some extra insights. Thank you.

Answer 3

Fei Gao 0

Can you please advise me how to contact Microsoft Support? as our IT manager is no longer contactable.

0 comments

Answer 4

To obtain the IdP metadata URL in Azure AD, you typically need access to the Azure portal and the appropriate permissions. If the current Owner is no longer contactable, you may need to follow these steps:

Check for Other Administrators: If there are other administrators in your organization who have access to the Azure portal, they may be able to assist you in retrieving the IdP metadata URL.
Contact Microsoft Support: If you cannot find another administrator, you can reach out to Microsoft Support for assistance. They may be able to help you regain access or provide guidance on how to proceed.
Change Ownership: If you have access to the Azure portal, you can navigate to the Microsoft Entra ID section and check if you can change the ownership of the account. This typically requires being an administrator.
Access the Metadata URL: Once you have the necessary permissions, you can obtain the IdP metadata URL in the following format: https://<tenant-name>.b2clogin.com/<tenant-name>.onmicrosoft.com/<policy-name>/Samlp/metadata Replace <tenant-name> with your Azure AD B2C tenant name and <policy-name> with the custom SAML policy you created.

If you are unable to access the Azure portal or need further assistance, contacting your IT department or Microsoft Support would be the best course of action.