Application with identifier 'https://sts.windows.net/xxxxxx/' was not found in the directory 'Default Directory'

Question

Application with identifier 'https://sts.windows.net/xxxxxx/' was not found in the directory 'Default Directory'

CC0262 5

I followed https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/adobeexperiencemanager-tutorial this tutorial to set up my configurations in order to integrate Azure AD SSO with my local application. However, I am getting the error "AADSTS700016: Application with identifier 'https://sts.windows.net/xxxxxx/' was not found in the directory 'Default Directory'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant." I could not figure out the reason

Here is my Azure AD set up

User's image

Here's my SAML configuration User's image

This is the error code I get when logged in

User's image

Any help is appreciated. Thank you!

1 answer

Your answer

Answer 1

JamesTran-MSFT 37,221 Microsoft Employee Moderator

@CC0262

Thank you for your post!

Error:

AADSTS700016: Application with identifier 'https://sts.windows.net/xxxxxx/' was not found in the directory 'Default Directory'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.

I understand that you followed the Azure Active Directory integration with Adobe Experience Manager documentation to set-up and configure Azure AD SSO, but when trying to login you ran into the AADSTS700016 error message. To hopefully help point you in the right direction or resolve your issue, I'll share my findings along with some troubleshooting steps below.

Findings:

Based off your screenshots, I can see that you installed / added the Adobe Experience Manager from the Azure AD Enterprise Apps gallery. However, when referencing your error message ...or consented to by any user in the tenant, can you make sure that you assigned an Azure AD user to your Adobe Experience Manager Application? You can do this by going to the Adobe Experience Manager Enterprise application and checking if there are any users listed under the Users and groups tab.

Note: If you the Assignment Required option is set to yes, then users and other apps or services must first be assigned this application before being able to access it.

User's image

I hope this helps! If you're still having issues logging-in after assigning a user to your Adobe Experience Manager app, please let me know.

Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

CC0262 5 Reputation points

2023-07-12T22:34:52.0466667+00:00

Hello.

Thank you for responding!

Yes, I have already added users to my user and groups. Even when I set the Assignment Required option is set to no, I am still getting the same error.

Here is a screenshot of the error in sign-in logs for the users.

It says "Application with identifier '{appIdentifier}' was not found in the directory '{tenantName}'." However, I retrieved the appIdentifier from the said directory. I only have one tenant so it's unlikley that I sent my authentication to the wrong tenant.

Any help is appreciated. Thank you!
CC0262 5 Reputation points

2023-07-12T22:36:41.2933333+00:00

Hello,

Thank you for responding!

Yes, I have already added users to my user and groups. Even when I set the Assignment Required option is set to no, I am still getting the same error.
JamesTran-MSFT 37,221 Reputation points Microsoft Employee Moderator

2023-07-13T18:46:14.41+00:00
@CC0262

Thank you for the detailed follow-up and for sharing more screenshots! To ensure I don't miss anything when troubleshooting your issue, I'll share a summary below.

Summary:

You've already assigned Azure AD users to your Adobe Experience Manager app.

Tried to login again after toggling the Assignment Required option and received the same error.

You only have one Azure AD tenant and have confirmed the App ID is present within the tenant specified in the error message.

Findings:

I looked into the Correlation ID that you shared within your initial post and found the same error message - UnauthorizedClient_DoesNotMatchRequest. Additionally, I confirmed that your app was configured correctly for AzureADMultipleOrgs to rule out the possibility of this being a multi-tenant app issue.

When looking at your SAML configuration and comparing it to the tutorial, can you make sure to set the Assertion Consumer Service URL (Reply URL), since not having this could be causing your AuthnRequest to be sent to the wrong location.

If you're still having issues after configuring the ACS URL, can you try collecting a network trace to see if that might provide some more details?

Additional Links:

SAML 2.0 Core Spec - Pg. 49 Line 2061 AssertionConsumerServiceURL

Redirect URI (reply URL)

If you'd like to work closer with our support team and you have an active Azure Subscription please let me know. I'd be happy to enable your subscription for a one-time free technical support request so you can get this issue resolved.

I hope this helps! Thank you again for your time and patience throughout this issue.
CC0262 5 Reputation points

2023-07-14T00:00:34.7233333+00:00

Hello,

I have added Assertion Consumer Service URL (Reply URL) but still no luck.
JamesTran-MSFT 37,221 Reputation points Microsoft Employee Moderator

2023-07-17T15:55:12.6866667+00:00
@CC0262

Thank you for following up on this and I apologize for the delayed response!

Since added the ACS URL and are still having issues, I'd recommend working closer with our support team on this so they can take a look into your environment and collect the appropriate logs to troubleshoot further.

If you have an active Azure Subscription, can you please email me with the info below and I'd be happy to enable your subscription for a one-time free technical support request so you can get this issue resolved.

Email: AzCommunity@microsoft.com Subject: ATTN - James Tran Body: Azure Subscription ID Link to this issue

Note: If you're a CSP Partner, you won't be able to open a support request directly – only the CSP partner has this ability.

Once you create a Support Request feel free to share your SR number here so I can follow your issue and update this thread as needed.

If you have any other questions, please let me know.Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Share via

Application with identifier 'https://sts.windows.net/xxxxxx/' was not found in the directory 'Default Directory'

1 answer

Your answer