Edit

Problems signing in to SAML-based Single Sign-On configured apps

  • Article

To troubleshoot the sign-in issues below, we recommend the following to better diagnosis and automate the resolution steps:

If you use the testing experience in the Azure portal with the My Apps Secure Browser Extension, you don't need to manually follow the steps below to open the SAML-based Single Sign-On configuration page.

To open the SAML-based Single Sign-On configuration page:

  1. Open the Azure portal and sign in as a Global Administrator or Coadmin.

  2. Open the Microsoft Entra Extension by selecting All services at the top of the main left-hand navigation menu.

  3. Type “Microsoft Entra ID" in the filter search box and select the Microsoft Entra ID item.

  4. Select Enterprise Applications from the Microsoft Entra left-hand navigation menu.

  5. Select All Applications to view a list of all your applications.

    If you do not see the application you want show up here, use the Filter control at the top of the All Applications List and set the Show option to All Applications.

  6. Select the application you want to configure for Single Sign-On.

  7. Once the application loads, select Single Sign-On from the application’s left-hand navigation menu.

  8. Select SAML-based SSO.

General troubleshooting

Problem when customizing the SAML claims sent to an application

To learn how to customize the SAML attribute claims sent to your application, see Claims mapping in Microsoft Entra ID.

Verify both the configurations in the portal match what you have in your app. Specifically, compare Client/Application ID, Reply URLs, Client Secrets/Keys, and App ID URI.

Compare the resource you’re requesting access to in code with the configured permissions in the Required Resources tab to make sure you only request resources you’ve configured.

Contact us for help

If you have questions or need help, create a support request, or ask Azure community support. You can also submit product feedback to Azure feedback community.