SAML SSO Issue with Microsoft MyApps – “Not Authorized” Error

[ganncamp (G Ann Campbell)]

Hi,

Welcome to the community!

You’ve configured SAML not with Entra, but with MyApps?

Can you confirm that MyApps is sending the required OAUTHSTATE cookie?

Also, this may be relevant:

SAML IDP Initiated Login

This was a Firefox thing for me. I dug a little deeper, and it turned out to be a really odd interaction with Container tabs in Firefox. I was opening https://sonar.example.com/sessions/init/saml?return_to=%2F in a non-Container tab, but my SAML IdP domain was set to always open in my Work Container. As a result it lost the OAUTH_STATE cookie set by /sessions/init/saml after it went to load the IdP. The flow is like this: (no Container) visit https://sonar.example.com/sessions/init/saml?retu…

 
HTH,
Ann