How to Resolve issueAuthentication fails with an error stating "The requested federation realm object '< Object ID >' does not exist"

Question

I am trying to add OKTA as an Identity Provider in the Entra ID.

and i keep getting this error " Authentication fails with an error stating "The requested federation realm object '< Object ID >' does not exist"

I have gone through the microsoft documentation but didn't help.

I get ISSUER URI error.

Answer 1

Hi @Ali Mumtaz

Thank you for posting this in Microsoft Q&A.

I understand you are facing an issue where authentication fails with an error stating 'The requested federation realm object '< Object ID >' does not exist'.

This failure happens when the third-Party identity provider returns the wrong IssuerURI within the Issuer field in the Security Assertion Markup Language (SAML) response.

We have a documentation on this issue. Can you please try the below solutions: https://learn.microsoft.com/en-us/troubleshoot/azure/entra/entra-id/mfa/authentication-fails-with-error?source=recommendations

Solution 1:

Contact the support team for the third-party identity provider and have them correct the IssuerURI, returned as Issuer, in the SAML the response returned to either Microsoft Entra ID or Microsoft 365, through the client.

Solution 2:

Use the command Set-MsolDomainFederationSettings to modify the IssuerURI of the federated domain to match the realm object listed in the error.

If you still facing an error, please create a support request

Thanks,

Navya.

Hope this helps. Do let us know if you any further queries.