can not upload metadata xml file to enterprise app for SAML SSO

Question

recently i am no longer able to upload XML metadata files to create SAML SSO for enterprise apps. Normally i create a new enterprise app and then click on single sign on and then i click the upload metadata button and choose the metadataXml file i downloaded from the vendor and it uploads and i save it and the SSO is done. Now i am getting an error when i attempt upload the xml file and it wont accept the file and i have to configure SSO manually. i have also tried updating an existing SSO app with new metadata and i am getting the same error

the info is correct in the XML file and this is happening with multiple app and files i have tried and its always the same error. so i can no longer upload metadata and have to manually configure them

Answer 1

To provide you a brief explenation, the ReplyURL is crucial for the SAML process, as it defines where the Service Provider (SP) expects to receive the SAML assertions from the Identity Provider (IdP).

The following should resolve your issue:

• Firstly, ensure start by making sure that your XML file starts with <?xml version="1.0" encoding="UTF-8"?>. Additionally, the file shouldn't contain any unwanted characters, formatting, or other content that's not relevant to SAML metadata.
• Check that the Assertion... tag in the XML file is correctly set:

<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://your-service-provider.com/sso/saml/ACS" index="1"/>

• 2 other important things are that the metadata should be consistent with the SAML 2.0 specifications & finally i would recommend to validate your whole XML structure online

XML validator: https://codebeautify.org/xmlvalidator

Additional Info: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-fed-saml-idp

Answer 2

its all correct and the validator link you sent says it is as well. as i said this is happening with multiple XML files i am trying to upload so the chances that i am downloading bad metadata files from multiple companies is slim. there is something wrong with my tenant and microsoft support has been horrible. i am not sure what to do at this point. i would be willing to pay microsoft to help fix this issue but can't figure out how to do that either.