Return
-
Title
Unable to Log into the Appliance using SAML with a Security Key -
Description
When trying to log in by using SAML with Azure as the identity provider you may get the following error when using a security key:
Sorry, but we're having trouble signing you in.
AADSTS75011: Authentication method 'MultiFactor, Fido' by which the user authenticated with the service doesn't match requested authentication method 'Password, ProtectedTransport'. Contact the KACE SMA application owner.
Logging in with a password works fine. -
Cause
Mismatch in settings. -
Resolution
On the SMA's web user interface browse to Settings>Control Panel>SAML Settings. Scroll all the way down to the bottom and tap the "View metadata" button as needed so that the checkboxes at the bottom are visible.
Uncheck the box labeled "Include RequestedAuthnContext in request" and save.
