从昨天开始，Azure的SAML响应中已使用旧的Reply URL ！！！ [英] Since yesterday, old Reply URLs are being used in SAML Responses from Azure!!!

问题描述

从昨天开始，我们在Azure AD中为企业应用程序提供的某些SAML配置开始出现异常.

Since yesterday some of our SAML configurations in Azure AD for our Enterprise Apps have started misbehaving.

所有内容看起来都是正确的，但是所使用的回复URL"是旧的.也就是说，它曾经是配置的回复URL"-但是我们在某些时候(通常是配置过程的一部分)对其进行了更改，并且自此以后一直运行良好.

Everything looks correct but the Reply URL being used is an old one. i.e. it used to be the configured Reply URL - but we changed it at some point (usually as part of the configuration process) and it's been working fine ever since.

现在，旧的答复URL正在SAML响应中使用.您无法从Azure Portal UI中看到此消息(仍然显示正确的Reply URL)-但是将URL更改为错误的内容，将其保存，然后将其更改回正确的值并保存即可解决 问题.

Now, the old reply URL is being used in SAML Responses. You can't see this from the Azure Portal UI (still shows the correct Reply URL) - but changing the URL to something wrong, saving it, and then changing it back to the right value and saving it resolves the problem.

疯狂-嗯?！

这已导致我们的用户无法使用生产系统.

This has caused loss of access to production systems for our users.

-Matt Symes

- Matt Symes

推荐答案

嗯....您的应用设置中是否可能列出了其他回复网址或与您在应用程序注册中所拥有的配置不匹配的配置?

Hmm.... is it possible that you have a different reply url listed in your app settings or configs that do not match what you have in the app registration? 

如果您可以重现该错误并以某种方式进行演示，请发布屏幕截图，视频或示例，然后我可以为团队创建一个产品错误，以供他们继续研究.

If you can reproduce the error and demonstrate it somehow, please post screenshots, a video, or sample, and I can create a product bug for the team to work on. 

您也可以在此处进行报告.  https://feedback.azure.com/forums/169401-azure-active-directory

You can also report it here. https://feedback.azure.com/forums/169401-azure-active-directory

这篇关于从昨天开始，Azure的SAML响应中已使用旧的Reply URL ！！！的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！