saml - multiple reply URL

Question

I'm using Azure saml to log into some remote devices and it works perfectly for a single device. But I have 50 of them and I really don't want to make a separate Azure app for each of them. It is possible to do this all within a single app? The problem I'm seeing is that it is sending the token to the wrong ACS URL; it always sends to the default. When I log into site2.mysite.com it tries to send the token to site1.mysite.com and of course the login fails.

Answer 1

Hi @Random_Guy ,

You can set up to 256 reply URLs for a particular application and the limit is documented here.

You can set multiple reply URLs in a given enterprise application but the token can only be posted to one of the Reply URLs configured in the application, depending on which Reply URL or Assertion Consumer Service URL is included in the authentication request. If the Assertion Consumer Service URL is not included, the SAML Response will be sent to the first Reply URL in the list.

Even though there can be multiple reply URLs configured in the application, the token will only be posted to the one included in the SAML request.

This question was answered by Amanpreet Singh as well and a sample request was provided in this thread.

Let me know if this helps answer your question. I'm happy to relay feedback to the product team if you would like to share more about your particular scenario, and you can also leave your own feedback in the Ideas forum.

-

If the information helped you, please Accept the answer. This will help us and other community members as well.

Answer 2

In case of multiple reply Urls set up, how does Logout URL work. If the reply Urls have different sub domains, where will the logout response be sent?