Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,132 questions
Azure CBA Authentication
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 36%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Akira Asano
0
Reputation points
Hi All,
Wondering if the bellow issue have been already addressed. I am having the same issue with error for authenticating via Azure CBA:
Reference:
Goal:
Authenticate via Azure CBA
Issue:
After uploading the cert in the Azure Certificate Authority, I've enabled the CBA Authentication method and assigned this to a specific group. Created a rule using MFA as protection level and did username binding to match the UPN
We currently have an ADFS server and have 2 domains being used.
Old: firstname.lastname@company1.com
New: firstname.lastname@company2.com (currently being used to login and authenticate via Azure MS Auth)
I've uploaded the root certificate of company1.com in Azure however, it doesn't even show me that uploaded cert whenever I try to login using certificate based.
Any help and suggestion would be much appreciated.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Marilee Turscak-MSFT 36,866 Reputation points Microsoft Employee2024-03-09T00:58:39.06+00:00 Have you confirmed that the certificate is valid and created the certificate by using the PowerShell script here? https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-certificate-based-authentication#add
In addition can you confirm whether the certificate is expired?
We do have a troubleshooting guide for facing CBA issues. https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/certificate-based-authenticate-issue
-
Akira Asano 0 Reputation points
2024-03-10T19:25:39.0533333+00:00 I have added the root CA from our existing DC. Is it the wrong one?
I don't see any powershell script from the link you have provided. Are you able to guide me through it?
The certificate that I've used isn't expired yet.
-
Akira Asano 0 Reputation points
2024-03-14T00:51:27.5566667+00:00 @Marilee Turscak-MSFT any update on this?
Sign in to comment
Sign in to answer