Merge pull request #229397 from bhavana-129/adp-update

Product Backlog Item 2448039: SaaS App Tutorial: ADP update

Author: v-shils

articles/active-directory/saas-apps/adpfederatedsso-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 11/21/2022
+ms.date: 03/07/2023
 ms.author: jeedes
 ---
 
@@ -153,7 +153,7 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 ### Configure your ADP service(s) for federated access
 
->[!Important]
+> [!Important]
 > Your employees who require federated access to your ADP services must be assigned to the ADP service app and subsequently, users must be reassigned to the specific ADP service.
 Upon receipt of confirmation from your ADP representative, configure your ADP service(s) and assign/manage users to control user access to the specific ADP service.
 
@@ -219,6 +219,34 @@ Upon receipt of confirmation from your ADP representative, configure your ADP se
 
 1. On confirmation of a successful test, assign the federated ADP service to individual users or user groups, which is explained later in the tutorial and roll it out to your employees.
 
+### Configure ADP to support multiple instances in the same tenant
+
+1. Go to **Basic SAML Configuration** section and configure another test value in **Identifier (Entity ID)** textbox.
+
+    ![Screenshot shows how to configure another test instance value.](./media/adpfederatedsso-tutorial/append.png "Test")
+
+1. To support multiple instances in the same tenant, please follow the below steps:
+
+    ![Screenshot shows how to configure audience claim value.](./media/adpfederatedsso-tutorial/audience.png "Claim")
+
+    1. Navigate to **Attributes & Claims** section > **Advanced settings** > **Advanced SAML claims options** and click **Edit**.
+
+    1. Enable **Append application ID to issuer** checkbox.
+
+    1. Enable **Override audience claim** checkbox.
+
+    1. In the **Audience claim value** textbox, enter **Identifier (Entity ID)** value, which you've copied from **Basic SAML Configuration** section and click **Save**.
+
+1. Navigate to **Properties** tab under Manage section and copy **Application ID** from the Azure portal.
+
+    ![Screenshot shows how to copy application value from properties tab.](./media/adpfederatedsso-tutorial/app.png "Tab")
+
+1. Download and open the **Federation Metadata XML** file from the Azure portal and edit the **entityID** value by adding **Application ID** manually at the end.
+
+    ![Screenshot shows how to add the application value in the federation file.](./media/adpfederatedsso-tutorial/federation.png "File")
+    
+1. **Save** the xml file and use in the ADP side.
+
 ### Create ADP test user
 
 The objective of this section is to create a user called B.Simon in ADP. Work with [ADP support team](https://www.adp.com/contact-us/overview.aspx) to add the users in the ADP account.