ASP.NET Core
A set of technologies in the .NET Framework for building web applications and XML web services.
4,816 questions
OpenIdConnectAuthenticationHandler: message.State is null or empty.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 26%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
Shripad Godse
25
Reputation points
I have a multi-tenant application in Microsoft Entra ID, which I use for Single Sign-On in my .NET 6 (API) and Angular 7 application as shown in the attached screenshots.
There are two issues I'm facing:
- After updating from .NET 3.1 to 6, I'm not able to log in using SSO on my local machine. I suspect this may be due to a proxy server change, but I'm not sure how to debug this issue properly.
- When I click on my application in the My App section of Office apps, I am getting an exception message (this is not related to updating .NET version). The exception message is:
System.Exception: An error was encountered while handling the remote login. ---> System.Exception: OpenIdConnectAuthenticationHandler: message.State is null or empty.
Implementation:
Startup.cs
Controller:
My App from microsoft app section:
ASP.NET Core
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,963 questions
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 20%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Shweta Mathur 30,291 Reputation points Microsoft Employee Moderator2023-12-18T06:49:11.5533333+00:00 Hi @Shripad Godse ,
Thanks for reaching out.
Did you try to remove CallbackPath from configuration settings?
-
Shripad Godse 25 Reputation points
2023-12-18T08:54:12.01+00:00 @Shweta Mathur Yes, I tried removing CallbackPath from configuration section done in startup.cs on local as well as deployed on server for testing 2nd issue though no luck. Also i am seeking help for both the issues mentioned in post though the 2nd issue i have mentioned is of high priority so can you please me in this case.
-
Shripad Godse 25 Reputation points
2023-12-19T11:33:26.68+00:00 @Shweta Mathur can you please guide me here?
-
Shweta Mathur 30,291 Reputation points Microsoft Employee Moderator
2023-12-22T09:42:23.5233333+00:00 The error message "OpenIdConnectAuthenticationHandler: message.State is null or empty" typically occurs when the state parameter is not properly set during the authentication flow. This can happen if the state parameter is not included in the authentication request or if it is lost during the authentication flow.
Are you setting the state parameter correctly in your request.
In case the above does not work for you, please send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN:shweta" and we will help you with alternative support options on this.
Thanks,
Shweta
Sign in to comment
Sign in to answer