Return
-
Title
Error AADSTS75011 when authenticating with SAML -
Description
You receive error AADSTS75011 when trying to sign into an application that has been setup to use Azure AD for identity management using SAML-based SSO for the K1000 appliance. -
Cause
The RequestedAuthnContext is in the SAML request. This means the app is expecting the AuthnContext specified by the AuthnContextClassRef. However, the user has already authenticated prior to access the application and the AuthnContext (authentication method) used for that previous authentication is different from the one being requested.
-
Resolution
To remove RequestedAuthnContext from the SMA requests browse to Settings> Control Panel>SAML Configuration, scroll all the way down to the bottom and there should be a checkbox under the "Local Service Provider (SP) Settings" section labeled "Include RequestedAuthnContext in request". Uncheck it to disable this setting. If the checkbox is not visible click on the "view metadata" button for this section. Save this page and test.