I tried for a while to get Entra working with an external identity provider (Google Workspace).

The other way around worked (Google could use Entra) but it was basically impossible to backend Entra from Google. Weird.