SSO AWS Cognito as SP and AD as IdP - SP login flow not working

jpphrql 1 Reputation point
2021-04-26T17:04:09.51+00:00

I went through setting AD as IdP and AWS Cognito as SP. The login flow works when I am signed into login.microsoftonline.com, but does not work when I signout of login.microsoftoline.com.

I get the following error trying to sign-in via AWS Cognito, its going to login.live.com and get a 404 error

This login.live.com page can’t be foundNo webpage was found for the web address: https://login.live.com/oauth20_authorize.srf?response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&scope=openid+profile+email+offline_access&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2&state=rQIIAVWVv4_jRBTHE-736k46IQrKK6CgyK7HiXNJpJMgie3EYZzd8XjGnubkX7uOPXacjXfjuKWh4UR9JSD-gOugOlGeKK4CdAIaJEAgJEpKJtkTEpU18sx7877v831z0Bi8d3GeD7zMq5f5IFie5YtyOVgXg4t1axOty5b8OIiPj_PJvIbnbx7c_-7bJz99pH354Vc_PHn28_d__vq0eecxX1xGh8Ey-6b57uMeCHqR7CutoO37rU73YbvV63b7LTloAx90ukCO5JfN5u_N5qs3blhexuWn1368wxw-gxRuSc4JqrnspmTtSXzlyzylKpDY2KBRhsZwwl2YKpfEZqOQmNocM9uWeG1RZRTRaU3zoYcAU4gO9FArsIWZ4YFCdhPDIlpaW_kwsTRj4yZTcMKNseWYhm8rtUtCGlKk-XppeFm_wHmBoIwmkPIY5kEl1stQVVSSlaZPY8nFxjJKlSnGQ49oIpFqziJSOLaI7xO2YiqjNjD3-X16tmFqPIrSfjGfMEYkZeUm5i7fFDskQXKsuCDsQK1wcTKE4j6yy6HyWo_kSg-oeJw70cRkvs1WrpN2PLsaWzn3qKq0d_VEvKB2IuIBUmCZz7xsurWzyvCcsHCleBZmqBT1if0FYSQe-epeXwJVNieqaQQSv8BZsYCSsXbb3DB5qFg5E_EYEPqgfb6sWhCJbdzUnDF1l79IkeRuKDcNMzMuSG4uTtphQfFUEboTnPUZacc15QHw-b4fC5-zWpxveyTdzmnpEVu5pCTsBKBwTKp4BGtrpobLkBfj_-2nRjl3CIP8qj5Lm25QWllezU07dRWXwMpKqzjCQ4lwRELNvAj0yoJy3BX3r01N9GWMYtF_06VAwlxzmQooSVmH2WgW6hqJdIX4dgfYtJwjbqy9WnO8DAKXx0mk8ZWnmsRSCxXTSvdkdC74IH5WWdgmawgQmdvMQtnZxsXmCPKTLWvHtq92NjYR8slG11cBRqpi2LJiYWA4NCE2SplgCM2RZhJb3Btmm0rEkxA1p1hoBhMttgmRMEGur8aIpHZFM2VGMqS7tTlHWezQlOk4QwQ7iFoq6NJEGyFqTK0MpGKf0CY0r3gpRP-XW4H1zBJ-Ebzt_KYw0X8z5SXKCgaTtHIzxYrE5yTrJ37KatGPvf9MGqdUMy6xrtDdf6ZXCQSahGkKPN1wUMIWMCGCbyMNqebaOXvN856vEgteieDFJYESEjbxJ0hgoKx3vISkmGLKj73U3opaz6Gq2BQPj4m69_fc12GN86GIj0T_JQCpMQnbwr-cdXf1nGRoauc8JtKy2t835atgQtIdf3t_ZmiCEuFXIuaBXHYC3SjDyXDhU2SL8_Mo0xzBl-Hlw3LHo_CTC8dS12xzbU7DMVRP2kzq1WSCHIhDm6XmEEmhRK1e5af9yiauHCQMmxMDhgCpXi114dmjR8-uvSP1Ot3otAdaoCd5rY5_Krd6USdsBf5pGAZSr997KL28fveP63ela4Pbtw_uN95uPGj8c7352Q0xcjun7Pkvn-cffPH-vP7tr0-aL24cgctLZeqsshkxz5zh6HSr4FGfbKC-Pe_XMJovxaIMfN3tnzzqDcCnN--9uNn4-2bz41uNp7caX9-BcVkW68HRkRcEy4u8XLeK-HzFSzHwD72LMj78b_ofXr0Mrx-G3ZQ_Wu-m9tEiLM6jdbHM19Grg7dkSQYtqdOSuw_Aw4EEBu02e36v8S81&estsfed=1&uaid=dd8eccd646834ca6b9d88eb2ded7ebe6&fci=urn%3aamazon%3acognito%3asp%3aus-west-2_chPPnHOzM&username=jeevanpendliad3%40outlook.com

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,740 questions
{count} votes