Entra ID

Microsoft Entra App Gallery Self-Service Onboarding Preview

3 min read

Summary

Microsoft has launched a public preview of self-service onboarding for new Microsoft Entra App Gallery applications. The new workflow lets publishers validate OIDC, SAML, and provisioning integrations before submission, then create, submit, and track app listings in the Entra admin center, reducing delays and rework.

Need help with Entra ID?Talk to an Expert

Introduction

Microsoft is streamlining how new applications are added to the Microsoft Entra App Gallery. For software vendors and identity teams, this matters because the new self-service onboarding experience can reduce review delays, catch configuration issues earlier, and make the publishing process easier to manage.

What's new in public preview

Microsoft has introduced a guided self-service workflow in the Microsoft Entra admin center for publishing new App Gallery applications.

Key improvements include:

  • Pre-submission validation for supported integrations
  • Guided submission workflow inside the Entra admin center
  • Draft save and resume support for incomplete submissions
  • Status tracking and feedback handling during Microsoft review

Supported validation scenarios

The preview currently supports validation for:

  • OIDC single-tenant and multitenant SSO via the Microsoft Entra App Validator browser extension
  • SAML SSO via the Microsoft Entra App Validator browser extension
  • User provisioning via Microsoft-provided Logic Apps validation flow or the SCIM onboarding agent

For OIDC and SAML, the App Validator walks publishers through sign-in scenarios, identifies blocking issues, and generates the Test ID required for submission. For provisioning, Microsoft tools generate validation results that can be attached to the submission.

What admins and publishers can do

Within the new workflow, publishers can:

  • Create a new App Gallery submission
  • Attach validation results
  • Add application, publisher, and support details
  • Upload customer-facing documentation and logos
  • Submit the app for Microsoft review
  • Track progress and respond to feedback

It is important to note that submission does not mean automatic publication. Microsoft still reviews each app before it appears in the App Gallery.

Impact on IT administrators and end users

For IT admins, faster and more consistent app onboarding should improve how quickly new SaaS applications become discoverable in Microsoft Entra App Gallery. That can simplify SSO and provisioning deployment planning.

For software publishers, the biggest benefit is earlier issue detection. Instead of waiting for Microsoft review to uncover configuration problems, teams can validate integrations upfront and fix issues while implementation details are still fresh.

Limitations in preview

This public preview supports new application submissions only. It does not yet support:

  • Updates to existing App Gallery listings
  • Removal requests for published applications

Existing apps must continue to use the current update or removal process.

Next steps

To get started, go to: Enterprise applications > New application > Browse Microsoft Entra App Gallery > Publish your application

Publishers should also review Microsoft’s prerequisites and validation guidance before submitting. Organizations that publish Entra-integrated apps may want to test the preview now and provide feedback on validation coverage, diagnostics, and workflow usability.

Need help with Entra ID?

Our experts can help you implement and optimize your Microsoft solutions.

Talk to an Expert

Stay updated on Microsoft technologies

Microsoft EntraApp GallerySSOSCIMapplication publishing

Related Posts

Entra ID

Microsoft Entra Passkeys for External IdP App Sign-Ins

Microsoft has made browser-based authentication for external identity providers generally available for supported Microsoft app sign-ins on Android, iOS, and managed macOS. This lets federated Microsoft 365 users use passkeys, FIDO2 security keys, and eligible SSO sessions in apps like Outlook, Teams, and OneDrive, reducing password fallback and embedded web view limitations.

Entra ID

Microsoft Entra Tenant Governance Webinars 2026

Microsoft is promoting upcoming webinars focused on securing multi-tenant environments with Microsoft Entra Tenant Governance, now generally available. The sessions highlight how organizations can detect shadow tenants, apply consistent governance, and build a stronger identity foundation for AI readiness.

Entra ID

Microsoft Entra Private Access Replaces VPNs

Microsoft is positioning Entra Private Access as a practical replacement for traditional VPNs, using identity-driven, per-app access instead of broad network tunnels. The guidance outlines a phased migration approach that helps IT teams reduce attack surface, strengthen Zero Trust controls, and simplify remote access operations.

Entra ID

HiBob Microsoft Entra Integration Now Generally Available

Microsoft has announced general availability of HiBob’s native integration with Microsoft Entra, enabling HR-driven identity lifecycle automation for joiners, movers, and leavers. The integration helps IT teams govern provisioning and access changes across hybrid and cloud environments while reducing manual processes and security risk.

Entra ID

Microsoft Entra September 2026: Key Identity Updates

Microsoft Entra's September 2026 updates introduce new tenant governance, user-centric access reviews, lifecycle workflow cloning, and passwordless resource accounts for Teams devices. The release also adds cloud-to-AD provisioning, AI-focused MCP Firewall protections, and important deadlines for MemberOf-based configurations and permission scope changes.

Entra ID

Entra ID CAE Revokes Service Principal Tokens Instantly

Microsoft Entra now supports instant revocation of CAE-enabled service principal bearer tokens, giving security teams a faster kill switch for compromised workload identities. By adding the cp1 client capability claim, admins can invalidate tokens on high-risk, disabled, or deleted service principals instead of waiting 60 to 90 minutes for token expiry.