Currently Azure AD SSO can be configured by following http://help.tanda.co/en/articles/4624321-how-to-configure-microsoft-azure-ad-single-sign-on-sso. Currently, the log-in must be initiated on the IDP side. This ticket is to gauge priority of supporting service provider initiated log-in via the tanda log-in page.