Receive "not authorized" oauth2/callback/saml response error after upgrade to SonarQube 8.4

[ganncamp (G Ann Campbell)]

Hi,

There were indeed some changes to SAML auth in 8.4. Please let us know if these other threads aren’t helpful:

SAML error after upgrade to 8.4

I recently upgrading to 8.4 and I am now unable to log on using SAML. The release notes state “This could reveal a non-standard configuration that needs to be updated.” The error message i get is: 2020.07.07 04:49:33 ERROR web[AXMnjbQn6g4l3XB1AAE6][c.o.s.a.SamlResponse] The response was received at http://sonar.mydomain.io:9000/oauth2/callback/saml instead of https://sonar.mydomain.io/oauth2/callback/saml I am not sure where Sonar is constructing this callback url. There is nothing in the G…

Sonarqube - Developer 8.4.0.35506 - SAML error "[c.o.s.a.SamlResponse] <sonar.auth.saml.applicationId> is not a valid audience for this Response"

Hello team, Being a good internet citizen and creating a ticket in case this is of use for the developers at Sonarqube, or others who bump into the same error. In our case, we are using Microsoft Azure Active Directory App Registrations to enable login to Sonarqube via our corporate system. Affected version: Developer 8.4.0.35506 Errors observed: While logging into Sonarqube via SSO, the user is navigated to the appropriate login screen on Microsoft, authentication is provided, and the use…

 
Ann