Cisco ISE and SAML Azure reply issue

Richard Tapp · ‎05-01-2025

Our ISE server is internal only, so we have created an app proxy in Azure for the SAML reply url.

Bue we get this error when testing it.

Has anyone else used ISE and Azure on a non public facing ISE server ?

AADSTS50011: The reply URL 'https://10.xx.xx.xx:8443/portal/SSOLoginResponse.action' specified in the request does not match the reply URLs configured for the application 'http://CiscoISE/09482daa-xxxx-4440-a5c4-xxxxxxxxxxx. Make sure the reply URL sent in the request matches one added to your application in the Azure portal.

marce1000 · ‎05-01-2025

- FYI : https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/error-code-aadsts50011-redirect-uri-mismatch

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

ahollifield · ‎05-02-2025

What do you mean by "internal only"?

Why are you using an IP address to access ISE and not the FQDN?