Azure AD signing option and certificate are greyed out. Is this an authorization issue?

Question

Hello

I'm trying to setup SSO for an Applicationin Azure.

I create a new enterprise application. When I trying to download metadata under SAML, the link for "Federation Metadata XML " is greyed-out.

why can't I download this?

Many thanks

Answer 1

@Mike

Thank you for your post and I apologize for the delayed response!

When it comes to the Federation Metadata XML link being greyed out, there are a few reasons you could be running into this issue and I'll share some troubleshooting steps below.

• Note: If you're still having issues, can you share a screenshot of what you're seeing along with any documentation that you're following? If you'd like to work closer with our support team on this, I'd be happy to enable a one-time free technical support request for your subscription so you can get this issue resolved.

1. To download the Federation Metadata XML, please make sure you're a Global Administrator or a Cloud Application Administrator within MS Entra ID.
2. If you have the correct permissions, ensure that the application you're trying to configure does support SAML-based single sign-on. If your application does not, the "Federation Metadata XML" link will be greyed out.
   • For more info - Single Sign-on Tutorials for integrating applications with Microsoft Entra ID

Additional Links:

• Troubleshoot SAML-based single sign-on
• Debug SAML-based single sign-on to applications
• Federation metadata
• Microsoft Entra built-in roles

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

---

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.