Member-only story
Configuring AEM for Single Sign On (SSO) via Microsoft Azure AD
This is an article about configuring AEM for Single Sign On (SSO) via Microsoft Azure AD. It discusses what SSO is and how it works. It also details the prerequisites and steps to configure SSO using Azure AD. Some of the important points from this article are that the AEM server needs to be enabled over SSL and you will need an Azure account. You will also need to download a certificate from Azure AD.
Non-members can access it here.
Introduction
Imagine remembering just one password to unlock all your favorite apps? That’s SSO! It lets you log in to different things with just one username and password, so no more password overload!

Prerequisites
Azure : Azure AD SAML Signing Certificate, Azure AD Login URL, Azure AD Logout URL, Azure AD Identifier (Entity ID), App Federation Metadata URL
AEM: AEM 6.5.20 enabled over SSL using TLS1.1 or above. Refer this article to connect to AEM instances with HTTPS.