Cloud app - SAML authentication gives non-retryable error

Question

Cloud app - SAML authentication gives non-retryable error

Kevin Emmers 21

Hello,

We are trying to set up a web application that lets our users authenticate against Azure AD using SAML.
I followed below manual:
https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/saml-toolkit-tutorial

We managed to get it all set up and did a few test logins (which were succesful) but since yesterday we are getting the following error:
AADSTS75020: Non-retryable error has occurred.

Can someone help us or provide us with a fix/workaround for this issue?

Thanks in advance,
Kevin

soumi-MSFT 11,846 Reputation points Microsoft Employee Moderator

2020-05-12T11:14:02.197+00:00
@Kevin Emmers , Thank you for reaching out, The error was a bug in the portal, which had popped up somewhere around the month of January 2020. After that the PG has already fixed this. It would be great if you can share the complete error details, so that its easier for us to investigate on this. You can also send me the error details along with some more information that I am listing below and email those to azcommunity[at]microsoft[dot]com.

Tenant ID/Tenant Name:

Subscription ID:

Application Name:

Application ID:

Do also share the reference of this thread in the email so that its easier for us to locate the email and help your further.

Answer accepted by question author

0 additional answers

Your answer

soumi-MSFT 11,846 Reputation points Microsoft Employee Moderator

2020-05-12T11:14:02.197+00:00

@Kevin Emmers , Thank you for reaching out, The error was a bug in the portal, which had popped up somewhere around the month of January 2020. After that the PG has already fixed this. It would be great if you can share the complete error details, so that its easier for us to investigate on this. You can also send me the error details along with some more information that I am listing below and email those to azcommunity[at]microsoft[dot]com.

Tenant ID/Tenant Name:

Subscription ID:

Application Name:

Application ID:

Do also share the reference of this thread in the email so that its easier for us to locate the email and help your further.

Answer 1

@Kevin Emmers , It looks like that error is popping up for that application due to some misconfigured optional claims. I believe these claims are either being pushed through an Azure AD policy or might be through the app manifest.

Next action plan would be:

Remove the Azure AD Policy if optional claims are being pushed from Azure AD policy
Else remove the optional claims from the app manifest
Then try to check if the users are able to login
If it still fails with the same error , we would have to collect a Fiddler trace to understand the SAML request.

Hope this helps. Do let us know if this helps and if there are any more queries around this, please do let us know so that we can help you further. Also, please do not forget to accept the response as "Answer" if the above response helped in answering your query.

Share via

Cloud app - SAML authentication gives non-retryable error

0 additional answers

Your answer