负SAML身份验证响应
我有一个需要对IDP进行身份验证的应用程序（Azure），如果身份验证失败，我希望IDP向我的应用程序发送回复，以使用户未被授权。问题是IDPS没有发送任何有关身份验证的信息失败了，只是保留在登录屏幕上。 有什么想法吗？ 此致， mircea
I have an application that I need to do the authentication to an IDP (Azure) and if the authentication fails I want that the IDP to send back a response to my application that user is not authorise .the issue is that IDPs are not sending any information regarding the authentication failed and is just remaining on login screen.
Any ideas?
Best regards,
Mircea
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
无论使用哪种SSO协议，Azure AD始终将返回错误代码，消息和调试信息。
If that's not the case, then
可选，您可以尝试测试基于SAML的单登录从Azure Portal中，以验证您的应用程序正确配置。
Regardless of the SSO protocol used, Azure AD will always return an error code, message and debugging information.
If that's not the case, then Collect a network trace with Fiddler and post the results here minus any confidential information for additional debugging.
Optionally, you may try to Test SAML-based single sign-on from the Azure Portal to verify your application correct configuration.
当在IDP（Azure AD）上找不到用户时，最有可能的是在事件应用程序中使用的重定向URI的问题。这似乎与以下问题非常相似：重定向不适用于SAML登录，使用Azure Active Directory的PHP-SAML
Most likely it is an issue with the Redirect URI being used in the application for the event when user is not found on the IDP (Azure AD). This seems to quite similar to the following issue: Redirect not working for SAML login, php-saml with Azure Active Directory