Configuring Azure AD as an external identity provider for SSO login works from a setup standpoint, but clicking 'Login with Azure AD' immediately shows an authentication error — before the user even gets to enter credentials. What's a likely cause on a remote/hosted environment?

All FAQ questions / Security and access

Answer

Check outbound network access from the middle-tier cluster host to the required Azure AD endpoints — if the cluster's firewall/network policy doesn't allow outbound access to Microsoft's identity endpoints, the authentication flow fails immediately, before the login prompt is even reached, since the middle tier can't complete its side of the OAuth/OIDC handshake with Azure. Whitelisting the required Azure AD endpoints from the cluster host resolves it.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions