If you encounter Microsoft Entra ID error AADSTS75011 when signing in to Otter using SAML Single Sign-On (SSO), Microsoft Entra ID has rejected the authentication request because the authentication method used does not match the method requested during sign-in.
This error can occur when Otter includes a specific authentication context in its SAML request that does not match the authentication method used by Microsoft Entra ID. The issue may be resolved by updating your workspace's SAML SSO configuration.
Error message
You may see a Microsoft sign-in error containing AADSTS75011, indicating an authentication method mismatch.
How to resolve error AADSTS75011
Error AADSTS75011 can occur when Otter requests a specific SAML authentication method that does not match the authentication method used by Microsoft Entra ID.
To resolve this issue, the Include Requested AuthnContext setting in your workspace's SAML SSO configuration may need to be disabled.
When this setting is disabled, Otter no longer includes a specific requested authentication context in its SAML authentication requests. This allows Microsoft Entra ID to apply the authentication methods permitted by your organization's existing policies.
Disabling Include Requested AuthnContext does not disable your organization's Microsoft Entra ID authentication policies, including multifactor authentication (MFA) or Conditional Access requirements.
Set up SAML SSO with Microsoft Entra ID
For complete instructions on configuring Microsoft Entra ID with Otter, including creating an Enterprise application, configuring SAML settings, enabling SSO, and managing advanced security options, refer to our Microsoft Entra ID SSO setup guide.
FAQs
What causes Microsoft Entra ID error AADSTS75011?
Error AADSTS75011 occurs when the authentication method used during sign-in does not match the method requested in the SAML authentication request.
This can happen when Otter includes a RequestedAuthnContext value that does not match the authentication method used by Microsoft Entra ID.
Is AADSTS75011 caused by my Otter account?
Not necessarily. AADSTS75011 is a Microsoft Entra ID authentication error indicating that the authentication method used does not match the method requested during SAML sign-in.
The issue may be related to the Include Requested AuthnContext setting in your workspace's Otter SAML SSO configuration rather than your individual Otter account.
Do I need a Microsoft Entra ID administrator to resolve this error?
Not necessarily. Error AADSTS75011 may be resolved by updating the Include Requested AuthnContext setting in Otter's SAML SSO configuration.
Contact our Otter Support team to review your configuration and determine whether this setting should be disabled.
Your Microsoft Entra ID administrator may also need to investigate if the issue continues after the setting has been updated.
What does disabling Include Requested AuthnContext do?
Disabling Include Requested AuthnContext prevents Otter from specifying a particular authentication context in its SAML sign-in requests.
This allows Microsoft Entra ID to authenticate users according to the organization's configured authentication methods and policies without needing to match an explicitly requested authentication context.
This change does not disable MFA, Conditional Access, or other authentication security requirements configured by your organization.
What information should I provide to Otter Support?
If you encounter error AADSTS75011, contact our Otter Support team and provide the following information:
- A screenshot showing the Microsoft Entra ID error message and error code.
- The approximate date and time of the failed sign-in.
- Confirmation that you were signing in through your organization's SAML SSO configuration.
- Any relevant Microsoft Entra ID sign-in log details provided by your administrator.
Our team can review your SSO configuration and determine whether the Include Requested AuthnContext setting needs to be updated.
Feedback
0 comments
Article is closed for comments.