topic Re: AzureAD SSO - Reply URL does not match in Security

AzureAD SSO - Reply URL does not match

mattiashenrikss — Tue, 17 Dec 2019 07:53:59 GMT

I am trying to set up SSO with Splunk and AzureAD. I have used these guides: https://docs.splunk.com/Documentation/Splunk/7.1.3/Security/ConfigureSSOAzureADandADFS (Splunk) and https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/splunkenterpriseandsplunkcloud-tutorial (AzureAD).

When trying to access Splunk and logging in via AzureAD, I get the following message from AzureAD: "... The reply url specified in the request does not match the reply urls configured for the application: ...". The reply url configured in AzureAD is "https://[mySplunkServer]/saml/acs".

What would be the next step to debug this? Is there a way to verify that the reply URL in Splunk is actually "https://[mySplunkServer]/saml/acs"?

Re: AzureAD SSO - Reply URL does not match

benwilinski — Tue, 25 Feb 2020 19:50:15 GMT

Have you tried changed the sso/slo binding to 'http post' on the saml config page?

Re: AzureAD SSO - Reply URL does not match

mattiashenrikss — Wed, 26 Feb 2020 06:05:04 GMT

My issue was that I used the wrong name for my splunk server in the Reply URL configured in Azure AD. I found out by looking at the SAML requests/responses between Splunk and Azure AD which are logged by Splunk if DEBUG logging is activated for certain loggers.

Re: AzureAD SSO - Reply URL does not match

LeandroKopke — Tue, 23 Nov 2021 21:18:38 GMT

Where did you get to see this information? I'm having the same problem as you in an integration I'm doing.