Hello, we keep getting this error when trying to set up SAML in Azure. Any Ideas?

[mrengifo]

Hello, we keep getting this error when trying to set up SAML in Azure.

Any Ideas?

Sign in

Sorry, but we’re having trouble signing you in.

AADSTS65005: Misconfigured application. This could be due to one of the following: The client has not listed any permissions for 'AAD Graph' in the requested permissions in the client's application registration. Or, The admin has not consented in the tenant. Or, Check the application identifier in the request to ensure it matches the configured client application identifier. Please contact your admin to fix the configuration or consent on behalf of the tenant. Client app ID: d087fd8e-51df-4664-a14f-97092db1fc5a.

[kona]

 @mrengifo  , I’m not sure why you’re getting that error message (we don’t use SAML or Azure), but I’m going to share this with the Canvas Developers‌ group in the Community to see if they can help. 

Hope someone has some suggestions!

Kona

[mrengifo · Accepted solution]

Thank you for your response. We were able to correct the issue by installing a certificate on the LDAP server.

Monica

[toddysm1]

Hi Monica,

Can you explain your configuration? We are trying to set up SSO between Canvas and Azure and it doesn't seem we are doing it right. If the user is signed into Canvas first, she or he is asked to sign in again into Azure, although the other way around works.

Thanks!

Toddy

[mrengifo]

Hi, This is not an issue any more.

Thank you,

Monica

[toddysm1]

Hi Monica,

I understand that you solved it. Because we are facing similar issue, I am curious about the solution. Do you mind posting the steps?

[adk_edv]

We are also facing similar error when trying to setup SSO b/w Canvas & Azure.

Can any of you guide me through the steps please!

[Mikee]

I'd be reading this very thoroughly:

https://community.canvaslms.com/t5/Canvas-Integration-Documents/Configuring-Azure-SAML-and-Canvas-Au...

There are two things at play here - the first is authentication - is this user able to log in? (AuthN), then - what does this user have access to? (AuthZ)

The user account needs to exist in Canvas AND Azure before the link will work