End User Receiving Error: AADSTS750054:SAMLRequest or SAMLResponse must be present as a query string parameters in http request for SAML redirect binding

Question

Disclaimer: I am business analysist trying to triage login issue for an end user. IT department has not seen this error before.

Our company recently introduced SSO; one of our business partners is using the company assigned email (B2B account) to log into one of our platforms, but receives the attached error. We have had the user clear cache, use a new browser window, and restart the computer. We have checked the URL they are using and they are still receiving this error. We have not receive any other reports of user receiving this error. Any suggestions?

Answer 1

Hello

Thank you for reaching Microsoft Q&A on your query.

As per the description, we understand that users are getting AADSTS750054 error while accessing the application that was recently configured with SSO.

Here, Entra ID is not able to identify the SAML request within the URL parameters in the HTTP request. This can happen if the application is not using HTTP redirect binding when sending the SAML request to Microsoft Entra ID.

The application needs to send the SAML request encoded into the location header using HTTP redirect binding.

Most often, the error is due to one of the following issues:

1.Ensure that single-sign on is enabled on the application side.

2.The application must support service provider-initiated single sign-on (sometimes known as SP-initiated SSO). When entering a sign-in URL for an application that only supports identity provider-initiated single sign-on can lead to a bounce back from the application without a SAML response.

3.Verify that the sign-on URL is correctly configured.

Please let us know which application you are configuring? (gallery or non-gallery application)

I suggest you reach application team to make sure SAML request encoded into the location header using HTTP redirect binding.

For more information about how to implement it, read the section HTTP Redirect Binding in the below SAML protocol specification document.

https://docs.oasis-open.org/security/saml/v2.0/saml-bindings-2.0-os.pdf

Thank you.