Deepak-0822 commented on issue #12525:
URL: https://github.com/apache/apisix/issues/12525#issuecomment-3192390759

   Hi Skye,
   We are a team working on APISIX Gateway development.
   
   We created a sample route for SSO testing. When accessing the APISIX Gateway 
URL, the request is successfully redirected to the Azure login portal, but 
after authentication it returns a 500 Internal Server Error.
   
   We suspect one of two possible causes:
   
   APISIX is not receiving the return value (authorization code/token) from 
Azure.
   
   Azure SSO settings might be affecting the flow.
   
   In the Azure Portal under the Single sign-on page for the application, the 
SSO mode is shown as Disabled. The description says:
   
   Disabled mode means single sign-on isn’t used for the application. Users 
cannot sign in from My Apps unless they are assigned to the application. If 
configured for SP-initiated SAML SSO, changing to disabled won’t stop users 
from signing in outside the My Apps portal. To fully prevent sign-ins, disable 
user sign-in and remove user/group assignments.
   
   We are unsure whether this “Disabled” SSO status is causing the issue with 
APISIX OIDC authentication.
   Note: We followed this documentation 
"https://docs.api7.ai/apisix/how-to-guide/authentication/set-up-sso-with-azure-ad";
 .
   Thanks.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to