Nextcloud & Entra ID SAML SSO Problem

Question

I would like to connect to Nextcloud using Entra ID's enterprise application SSO authentication function.

I succeeded in popping up the login screen by referring to the posted guides.

However, when I try to log in with the entra ID account, (User permissions have been granted)

AADSTS70016 error is displayed as shown in the image.

But the question here is, The image above says ‘Application with identifier http://domian.com/index.php/apps/user_saml/saml/metadata was not found in directory’.

But I have set Identifier and Reply URL as below

Both Identifier and Reply URL are setting in https format.

The manifest is also set to https format.

I am curious as to why it keeps saying that the http://domian.com Identifier cannot be found despite the settings being like this.

To solve this problem, I deleted the Enterprise Application I had created and re-created it. But the result was the same.

Please let me know how to solve it. Thank you.

Answer 1

Hi @Min Kyo ChungThank you for posting this in Microsoft Q&A.

The error message "Application with identifier http://domian.com/index.php/apps/user_saml/saml/metadata was not found in directory" indicates that the identifier you have configured for your Nextcloud application in Azure AD does not match the identifier that is being sent in the SAML request.

To resolve this issue, you can try the following steps:

1. Double-check the identifier and reply URL that you have configured for your Nextcloud application in Azure AD. Make sure that they match the values that are being sent in the SAML request.
2. Check if the identifier and reply URL are using the correct protocol (http or https). If your Nextcloud instance is using https, make sure that the identifier and reply URL are also using https.
3. Verify that the SAML metadata URL for your Nextcloud instance is correct and accessible. You can try accessing the metadata URL directly in your browser to see if it returns the correct metadata.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.