Enforce SSO and can't login anymore

[Kazi Maina]

Hi Atlassian Support Team, 

Unfortunately I can't login anymore. I've configured SSO with Azure Active Directory but now I can't login anymore to the Admin Portal. 

I get the message: 

This sts.windows.net page can’t be found

No webpage was found for the web address: https://sts.windows.net//?SAMLRequest=

HTTP ERROR 404

Can you please help me?

[Ivan]

Check if the correct URL is set in the correct field, I mixed up Entity ID and SSO URL, picture shows the correct setup

[Dani Perez]

That's true. In my case, these values were mixed. Now I don't get the 404 error but the login does not work yet. I'm doing some tests and get back to you.

[Dani Perez]

Now I get a different error:

access denied Invalid+thumbprint

¿?¿?

[Pedram Mireftekhari]

Probably the configuration connecting to the Azure AD was done wrong. Do you have an internal Jira account to log in?

[Dani Perez]

Hi,

I'm having this same issue and everything looks ok. Actually it works without enabling "enforce SSO".

Any idea?

Dani

[Alex Ray]

Same issue here, it only breaks when I select the "force SSO" box on the authentication policy

[Dani Perez]

Hi. In my case, the issue was that the settings were reversed: There are two URL to setup on the SSO configuration on the Jira side. I set the wrong values. Once I put each of them in the correct field, this issue was fixed.