Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SAML Identifier missing on Service Principal #13525

Closed
nickadams675 opened this issue May 16, 2020 · 5 comments
Closed

SAML Identifier missing on Service Principal #13525

nickadams675 opened this issue May 16, 2020 · 5 comments
Assignees
Labels
Graph az ad question The issue doesn't require a change to the product in order to be resolved. Most issues start as that
Milestone

Comments

@nickadams675
Copy link

version 2.5.1

Describe the bug
Hello, it appears that the UI/possibly Graph API is not honoring the SAML Identifier (Entity ID) when set by the Application Manifest. The UI is showing the following behavior:
image

image

To Reproduce
Create an App Registration via az-cli, or Graph API, then create a Service Principal and link it to the App Registration.

Expected behavior
Since the SAML Identifier is showing in the first (non-edit) view, one would think that it was configured correctly. Although users cannot authenticate until this is filled in the UI.

Environment summary
Mac OS, az-cli version 2.5.1

Also, I do not see a way to configure this on the SP side via either az-cli or Graph API.

Thanks!

@ghost ghost added needs-triage This is a new issue that needs to be triaged to the appropriate team. question The issue doesn't require a change to the product in order to be resolved. Most issues start as that labels May 16, 2020
@nickadams675 nickadams675 changed the title SAML Identifier missing on Service Principa SAML Identifier missing on Service Principal May 16, 2020
@yonzhan yonzhan added the Graph az ad label May 16, 2020
@ghost ghost removed the needs-triage This is a new issue that needs to be triaged to the appropriate team. label May 16, 2020
@yonzhan yonzhan added this to the S170 milestone May 16, 2020
@yonzhan
Copy link
Collaborator

yonzhan commented May 16, 2020

add to S170

@jiasli
Copy link
Member

jiasli commented May 18, 2020

This issue doesn't seem be to caused by Azure CLI, but by AD Graph API. Could you create a Support Request in Azure Portal for AAD? Thanks for understanding.

@nickadams675
Copy link
Author

@jiasli

Thanks! I've opened a support request via the Azure Portal.

I would like to have the latter part of this issue investigated, is that possible?:

Also, I do not see a way to configure this on the SP side via either az-cli or Graph API.

@jiasli
Copy link
Member

jiasli commented May 19, 2020

If this can't be configured via Graph API, Azure CLI can't do this as well. Azure CLI is still using the old AD Graph API 1.6.

You may discuss with the support engineer about whether this can be done using Microsoft Graph API. If so, you may use az rest to call that API. Examples can be found at #12946.

@nickadams675
Copy link
Author

Thanks! I'll open an SR for this to have it added to the Graph API.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Graph az ad question The issue doesn't require a change to the product in order to be resolved. Most issues start as that
Projects
None yet
Development

No branches or pull requests

3 participants