topic Re: SAML reply-url error after 10.9 upgrade in ArcGIS Enterprise Questions

SAML reply-url error after 10.9 upgrade

AndrewRitchie — Mon, 12 Jul 2021 02:22:11 GMT

Hi all,

We've just upgraded from Enterprise 10.8.1 to 10.9, everything is working fine, except getting an error when trying to log in using Azure AD/SAML authentication, which had previously worked fine.

AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: 'XXX.XXX.XXX.portal'.

Using Chrome Dev tools, I can see the reply-url being passed is

/portal/home/accountswitcher-callback.html

However the only reply-url we have set up, and that I can find a documented reference to is:

/portal/sharing/rest/oauth2/saml/signin

I've asked our Azure admins to add a second reply-url, which I'm assuming will resolve the problem, but just wanted to document our issue in case others experience the same, or in case someone can show me where I've missed instructions 🙂

Re: SAML reply-url error after 10.9 upgrade

ChristopherPawlyszyn — Mon, 12 Jul 2021 14:55:27 GMT

Is the behavior present when initiating sign-in from the identity provider (button in AzureAD enterprise applications) or service provider (accessing sign-on page from Portal and being redirected to the IDP)?

I haven't seen this particular behavior previously, but do remember there was some inconsistent information on an Azure tutorial for ArcGIS Online/Enterprise logins and the IDP-initiated sign-on endpoint.

Re: SAML reply-url error after 10.9 upgrade

AndrewRitchie — Thu, 05 Aug 2021 05:05:12 GMT

Coming back to update this - I don't know what the problem was in the end.

But I ended up uninstalling and reinstalling the web adaptor, and it was happy again straight away.

Re: SAML reply-url error after 10.9 upgrade

ready4GIS — Wed, 09 Apr 2025 11:54:00 GMT

Hi @AndrewRitchie

I am getting same issue in ArcGIS Enterprise 11.3. Can you let me know how this was sorted in your case.