# Any risks with SAML with Entra Enterprise Applications?

**URL:** <https://forum.pritunl.com/t/any-risks-with-saml-with-entra-enterprise-applications/3515>\
**Category:** Pritunl VPN\
**Tags:** pritunl-client, pritunl\
**Created:** [August 22, 2025, 2:16pm UTC](https://forum.pritunl.com/t/any-risks-with-saml-with-entra-enterprise-applications/3515 "2025-08-22T14:16:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Povi](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/p/c68b51/32.png) [@Povi](https://forum.pritunl.com/u/Povi)\
**Post date:** [August 22, 2025, 2:16pm UTC](https://forum.pritunl.com/t/any-risks-with-saml-with-entra-enterprise-applications/3515/1 "2025-08-22T14:16:14Z")

</div>

We’ve recently moved from Openvpn to Pritunl, and as we use Entra, I decided to set up the auth through SAML/Enterprise applications so that we can use Conditional access rules. I noticed that there aren’t any guides or options for this, but it works just fine when using the basic “SAML” setting in Pritunl and editing some attributes/claims.

Now my question is: Is there any specific reason for there not being any guides or documentation for it? Any known risks or anything like that?

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [August 23, 2025, 4:35pm UTC](https://forum.pritunl.com/t/any-risks-with-saml-with-entra-enterprise-applications/3515/2 "2025-08-23T16:35:56Z")

</div>

Without using one of the provider APIs there is no check at connection and no hourly checks while connected to verify the user is active on the single sign-on provider. The **[connection single sign-on](https://docs.pritunl.com/docs/connection-authentication)** can be enabled to verify the single sign-on user when connecting but there would still be no hourly verification while the connection is active.

---

<div class="post-metadata">

**Author:** ![Povi](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/p/c68b51/32.png) [@Povi](https://forum.pritunl.com/u/Povi)\
**Post date:** [August 25, 2025, 1:39pm UTC](https://forum.pritunl.com/t/any-risks-with-saml-with-entra-enterprise-applications/3515/3 "2025-08-25T13:39:34Z")

</div>

> [@zach](#):
>
> sing one of the provider APIs there is no check at connection and no hourly checks while connected to verify the user is active on the single sign-on provider. T

Great to know, thank you for the quick response!