We use an AD identity provider in LFDS with Windows Authentication. Our ADFS SAML provider links to it successfully without needing separate SAML users. After adding an Entra ID SAML provider, the same linked IdP setup doesn’t work—LFDS only authenticates if we manually create a SAML user.

Has anyone seen this when moving from ADFS to Entra SAML? Is this due to the NameID not matching LFDS usernames, or is another setting required?

Any guidance is appreciated.