使用 SAML 和 Salesforce 访问 Azure

Question

I configure on Azure AD (my IDP) the Salesforce Sandbox Application (my SP). I setup all following this tutorial: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/salesforce-tutorial

But when i try to connect using SSO i have this error:

AADSTS650056: Misconfigured application. This could be due to one of the following: the client has not listed any permissions for 'AAD Graph' in the requested permissions in the client's application registration. Or, the admin has not consented in the tenant. Or, check the application identifier in the request to ensure it matches the configured client application identifier. Or, check the certificate in the request to ensure it's valid.

I try to add inside API permissions the permission to AAD Graph but not work...

UPDATE:

Now the error is:

AADSTS700016: Application with identifier 'URL SALESFORCE' was not found in the directory '29ab2178-e8d4-4b83-a2ef-f62ea37a6413'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.

I need help please..

Thanks

Answer 1

I solve the problem. It was a wrong URL because for the Sandbox org i must put URL in that for:

https://domain.my.salesforce.com