Azure SSO Problems

[GlennD]

Hi @DWilliams14, welcome to the community.

Thank you for sharing this. I know that the second (working) URL is what we list in this support article: Set Up a Custom Enterprise Sign-In Configuration, is the first URL you mentioned in another support article or from a different source? If it is in one of our other articles I can make sure it is corrected.

[DWilliams14]

Hi Glenn,

The generic instructions for 'Custom Enterprise Sign-In Configuration' that you linked are fine. However the instructions for Azure AD specifically are not. If you look at this article: https://support.logmeininc.com/central/help/set-up-enterprise-sign-in-sso, under step 2 follow the link for Azure AD which takes you here: https://learn.microsoft.com/en-us/entra/identity/saas-apps/logmein-tutorial

On that page, under 'Configure Microsoft Entra SSO', step 5 says "On the Basic SAML Configuration section, the user does not have to perform any steps as the app is already pre-integrated with Azure."

However, the app default setting for entity ID is "https://authentication.logmeininc.com/saml/metadata/sp" which is incorrect. Within the azure app while configuring, it also tells you to use that incorrect url in the tooltip.

[Oscar601]

Use https://authentication.logmeininc.com/saml/sp. It works!

[GlennD · Accepted solution]

This is a combination of DWilliams14 comments for anyone else having an issue with this:

"For anyone else having this issue, I was able to resolve it by changing the identifier URL in the Azure AD App.

By default it is https://authentication.logmeininc.com/saml/metadata/sp and the instructions say not to change it, but changing it to https://authentication.logmeininc.com/saml/sp fixed this error for me - this is the url that they say to use if you look at the generic instructions for setting up SAML manually instead of the Azure specific ones.

The generic instructions for 'Custom Enterprise Sign-In Configuration' that you linked are fine. However the instructions for Azure AD specifically are not. If you look at this article: https://support.logmeininc.com/central/help/set-up-enterprise-sign-in-sso, under step 2 follow the link for Azure AD which takes you here: https://learn.microsoft.com/en-us/entra/identity/saas-apps/logmein-tutorial

On that page, under 'Configure Microsoft Entra SSO', step 5 says "On the Basic SAML Configuration section, the user does not have to perform any steps as the app is already pre-integrated with Azure."

However, the app default setting for entity ID is "https://authentication.logmeininc.com/saml/metadata/sp" which is incorrect. Within the azure app while configuring, it also tells you to use that incorrect url in the tooltip."