SAML SSO - AADSTS750161 Name ID Policy Error
Description
When configuring SAML SSO integration with MS Azure AD, the following error (or a similar one) may happen when a user is trying to log in with SSO.
AADSTS750161: Allowed SAML authentication request's NameIDPolicy formats are:
urn:oasis:names:tc:SAML:1.1:nameid-
format:emailAddress,urn:oasis:names:tc:SAML:1.1:nameid-
format:unspecified,urn:oasis:names:tc:SAML:2.0:nameid-
format:persistent,urn:oasis:names:tc:SAML:2.0:nameid-format:transient.
Observed on
- Any codebeamer version supporting SAML SSO
Solution
Very often this error is happening because incorrect value is specified in NameID field of SAML configuration in codebeamer.
Usually, SAML SSO integration works with Azure AD when NameID field is left blank.
If there is a value in NameID field then clear it, and verify if the problem persists.