I am trying to configure a SAML Integration with Azure AD B2C. I get AuthRequest has no assertion consumer service URL specified in metadata

Srinivas Mukund Chavali 6

AADB2C99049: Application registered corresponding to IssuerUri "redacted*" in AuthRequest has no assertion consumer service URL specified in its metadata.
Any help, On which end configuration is needed . SP or IDP

Akshay-MSFT 17,781 Reputation points Microsoft Employee

2022-09-20T04:42:59.407+00:00

Hello @Srinivas Mukund Chavali ,

Hope you got a chance to review this answer posted below. Please do post your queries in the comment section if you have any, if not then please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Thanks,
Akshay Kaushik
Akshay-MSFT 17,781 Reputation points Microsoft Employee

2022-09-27T08:30:15.297+00:00

Hello @Srinivas Mukund Chavali ,

Hope you got a chance to review the updated answer and comment as per your ask. Kindly confirm if you have any queries in the comments section. If you find this solution helpful, then please "Accept the answer". This will help us and others in the community as well.

1 answer

Akshay-MSFT 17,781 Reputation points Microsoft Employee

2022-09-15T05:59:59.783+00:00
Hello @Srinivas Mukund Chavali ,

Thanks for posting your query on Q&A platform. I was able to review the error "AuthRequest has no assertion consumer service URL specified in metadata". Since the Auth request is missing the consumer service URL, we must define the Service provider/application meta data:

In the application manifest please ensure that SAML metadata URL is defined :

Once validated please ensure that ACS URL is defined in the metadata:

-But if we don't have metadata URL then we need to Override or set the assertion consumer URL https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy#override-or-set-the-assertion-consumer-url-optional

Within SAML Application Manifest, you'd set the url property of replyUrlsWithType to the ASC URL as shown in the following JSON Example:

"replyUrlsWithType":[
{
"url":"https://samltestapp2.azurewebsites.net/SP/AssertionConsumer",
"type":"Web"
}
],

Thanks,
Akshay Kaushik

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Srinivas Mukund Chavali 6 Reputation points

2022-09-20T14:48:37.253+00:00

The service Provider in this case doesnt have SAML metadata URL .

All I get is a Sign-On Url and Assertion Consumer Service URL. How Can I proceed in this case?

Srinivas Mukund Chavali 6 Reputation points

2022-09-22T02:05:02.01+00:00

@Akshay-MSFT Can you suggest?

Akshay-MSFT 17,781 Reputation points Microsoft Employee

2022-09-22T08:01:25.73+00:00

Hello @Srinivas Mukund Chavali ,

Thanks for your response. Yes, it is a prerequisite to have a publicly accessible metadata endpoint as per: https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy#prerequisites.

But if we don't have it then we need to Override or set the assertion consumer URL https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy#override-or-set-the-assertion-consumer-url-optional

Within SAML Application Manifest, you'd set the url property of replyUrlsWithType to the ASC URL as shown in the following JSON Example:

"replyUrlsWithType":[
{
"url":"https://samltestapp2.azurewebsites.net/SP/AssertionConsumer",
"type":"Web"
}
],

Thanks,
Akshay Kaushik

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Akshay-MSFT 17,781 Reputation points Microsoft Employee

2022-09-23T07:31:43.503+00:00

Hello @Srinivas Mukund Chavali ,

Please review the answer "updated" with the solution for service providers which don't have exposed metadata endpoints.

Thanks,
Akshay Kaushik

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

I am trying to configure a SAML Integration with Azure AD B2C. I get AuthRequest has no assertion consumer service URL specified in metadata

1 answer

Your answer