I have an application that I need to do the authentication to an IDP (Azure) and if the authentication fails I want that the IDP to send back a response to my application that user is not authorise .the issue is that IDPs are not sending any information regarding the authentication failed and is just remaining on login screen. Any ideas? Best regards, Mircea

CodePudding user response：

Regardless of the SSO protocol used, Azure AD will always return an error code, message and debugging information.

If that's not the case, then Collect a network trace with Fiddler and post the results here minus any confidential information for additional debugging.

Optionally, you may try to Test SAML-based single sign-on from the Azure Portal to verify your application correct configuration.

CodePudding user response：

Most likely it is an issue with the Redirect URI being used in the application for the event when user is not found on the IDP (Azure AD). This seems to quite similar to the following issue: Redirect not working for SAML login, php-saml with Azure Active Directory