Azure AD B2C SAML - Assertion Consumer Service URL Issue

Question

Kirk Potter 0

There wasn't an option for tagging Azure AD B2C so I've had to use the new Entra External ID to tag this question.

We're testing a Azure AD B2C SAML sign-up/sign-in policy using the SAML test application (https://samltestapp2.azurewebsites.net/) we are getting an error that the B2C Application does not have the assertion consumer service URL https://samltestapp2.azurewebsites.net/SP/AssertionConsumer

The Application has this as both a reply URL and also in the manifest it has the metadata URL specified under "samlMetadataUrl" as https://samltestapp2.azurewebsites.net/Metadata

The Metadata URL clearly has the assertion consumer service URL specified.

1 answer

Answer 1

As per the error you're getting that the B2C Application does not have the assertion consumer service URL. Yes, it is a prerequisite to have a publicly accessible metadata endpoint as per: https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy#prerequisites.

Within SAML Application Manifest, you'd set the url property of replyUrlsWithType to the ASC URL as shown in the following JSON Example:

"replyUrlsWithType": [
{"url":"https://samltestapp2.azurewebsites.net/SP/AssertionConsumer",
"type":"Web"
}
],

Add the "https://samltestapp2.azurewebsites.net/SP/AssertionConsumer" in Application manifest

Example:
User's image Hope this helps. Do let us know if you have any further queries

Following up to see if the above answer was helpful.

If this answers your query, do click `Accept Answer` and `Yes'