MFA for VMware is no longer working, possible Azure issue

Question

Our SAML certificate in Azure for Single Sign on for VMware expired yesterday. We created a new certificate and set it to be Active, and then downloaded the metadata for that certificate and uploaded it to our UAG. Unfortunately, this did not work as expected, so currently our MFA for VMware has been turned off to allow our users to login to our environment.

Answer 1

Hello @Schifter, Gabriela ,

Thanks for reaching out in the Microsoft Q&A!

Ah, it seems like there's an issue with Multi-Factor Authentication (MFA) for VMware using Azure Active Directory (Azure AD) Single Sign-On (SSO). The trouble arose because of an expired SAML certificate in Azure AD, even though a new one was created. Possible reasons could include mistakes in setting up the new certificate, problems with the metadata uploaded to the Universal Access Gateway (UAG), or temporary glitches on Azure's end. To fix it, you should check the certificate configuration in Azure AD, ensure the UAG has the correct metadata, keep an eye on any changes. It might also help to consult below documentation:

1. Manage app registrations in Azure Active Directory
2. Azure AD single sign-on SAML configuration
3. VMware Identity Manager documentation

Hopefully, you can get MFA working smoothly again soon!

If you found this solution helpful, consider accepting it.