← cd ~/errors
// entra id sign-in errors
SAML single sign-on errors
SAML and federation single sign-on errors: identifiers, reply URLs, signing certificates and requested authentication context.
How to investigate
- Capture the SAMLRequest from the browser and decode it with the SAML decoder.
- Compare the Identifier, Reply URL and requested authentication context with the Enterprise App's SAML settings.
- Check the signing certificate is active and matches what the app expects.
Common errors (2)
More codes from Microsoft's reference (30)
- AADSTS20001 WsFedSignInResponseError
- AADSTS20012 WsFedMessageInvalid
- AADSTS20033 FedMetadataInvalidTenantName
- AADSTS40008 OAuth2IdPUnretryableServerError
- AADSTS40009 OAuth2IdPRefreshTokenRedemptionUserError
- AADSTS40010 OAuth2IdPRetryableServerError
- AADSTS40015 OAuth2IdPAuthCodeRedemptionUserError
- AADSTS50008 InvalidSamlToken
- AADSTS50124
- AADSTS65005 MisconfiguredApplication
- AADSTS75001 BindingSerializationError
- AADSTS75003 UnsupportedBindingError
- AADSTS75008 RequestDeniedError
- AADSTS75016 Saml2AuthenticationRequestInvalidNameIDPolicy
- AADSTS76026 RequestIssueTimeExpired
- AADSTS90020
- AADSTS90038 NationalCloudTenantRedirection
- AADSTS90081 OrgIdWsFederationMessageInvalid
- AADSTS90082 OrgIdWsFederationNotSupported
- AADSTS90084 OrgIdWsFederationGuestNotAllowed
- AADSTS90085 OrgIdWsFederationSltRedemptionFailed
- AADSTS90087 OrgIdWsFederationMessageCreationFromUriFailed
- AADSTS399284 InboundIdTokenIssuerInvalid
- AADSTS501241
- AADSTS700229
- AADSTS750054
- AADSTS900236
- AADSTS5000819 InvalidSamlTokenEmailMissingOrInvalid
- AADSTS7500514
- AADSTS7500529