IdP initiated sso fails with Oracle Fusion ERP gallery app on EntraID

Question

Hi Azure Community,

We have configured the the gallery app Oracle Fusion ERP to setup Federation SSO with EntraID as the IdP and Oracle Fusion as the SP.

However, the IdP initiated flow is NOT WORKING.

Please see the attached document for the error reported.

We would like to know why the gallery app is not working as expected.

Please help.

MS-Entra ID-SSO-Ticket.pdf

Answer 1

As per the DOC : https://learn.microsoft.com/en-us/entra/identity/saas-apps/oracle-fusion-erp-tutorial

Section : IDP initiated:

• Click on Test this application, and you should be automatically signed in to the Oracle Fusion ERP for which you set up the SSO.

You can also use Microsoft My Apps to test the application in any mode. When you click the Oracle Fusion ERP tile in the My Apps, if configured in SP mode you would be redirected to the application sign-on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the Oracle Fusion ERP for which you set up the SSO.

But it doesn't work. The code is written in Microsoft and while troubleshooting noticed the marketplace application did not send the SAML request to fusion for authorization but just redirect the user to the fusion application homepage.

This seems to be a bug which need to be fixed from Microsoft. As we see multiple customers are facing the same problem when they use IDP initiated flow.