Office 365 SSO

Question

I want to do SSO with Office 365 using thirds Party IDP. After successfully authenticated from IDP got below error .

Please find error for POST request:-

POST error: invalid_grant

error_description: AADSTS70002: Error validating credentials. AADSTS50008: Unable to verify token signature. The signing key identifier does not match any valid registered keys.

I have found above error through SAML tracer plugin in Firefox.

thuyavan ganesan · Answer

Hi,There is difference in token signing certificate causing this error , Please make sure Token Signing certificate on the IDP and in O365 are matches, if not update them.It will all work just fine ... please refer this article for step by step procedurehttp://edoras.sk/sso-issue-with-aadsts50008-unable-to-verify-token-signature/

Forum Discussion

Office 365 SSO

1 Reply

Resources