Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,700 questions
Azure Active Directory Access for Windows Admin Center not working
Bryan Powell
1
Reputation point
We registered our locally hosted Windows Admin Center Gateway(Server 2019, Admin Center Version 2009/Build 1.2.2009.21002) without issue. We then flipped on the option to add "Use Azure Active Directory to add a layer of security to the gateway". All pertinent users have been assigned the application in Azure AD/Enterprise Apps. However, we are seeing 2 issues:
- Most users are not being prompted to sign into Azure AD. Some are, but it is not consistent as to who is or is not prompted. I am aware the Azure login is a supplemental prompt for access.
- For those prompted, when attempting to sign in, they are met with an error the app "...needs permission to access resources in your organization only an admin can grant." This also affects when attempting to sign in to Azure in the Windows Admin Center control panel. I double checked the settings and they looked correct, specifically
Manual Azure AD app configuration.
On paper this configuration seems straightforward, but it is not working. Does anyone have any ideas on what I am missing?
{count} votes
-
James Hamil 14,196 Reputation points Microsoft Employee2021-03-02T23:05:12.177+00:00 Hi @Bryan Powell , we are investigating your issue and will update you shortly.
Best,
James -
Jeevan-MSFT 81 Reputation points Microsoft Employee2021-03-03T10:36:53.993+00:00 - Your problem is that some users are not asked to provide credentials since SSO works for them, while others aren't because they don't have the right cookies. Once they log in successfully the SSO should start working. More on this here https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on
- Please share a screenshot of the exact error that you are getting. Are these users having the right permission to view the resources that you are trying to access? How different are they from the ones that are able to login?
Sign in to comment