After configuring Azure Active Directory as a SAML 2.0 External Identity Provider, an error occurs on sign-in: AADSTS700016: Application with identifier 'api://platform.abbyy.cloud/XXX' was not found in the directory 'XXX'.

Dmytro Bezus

Edited August 08, 2024 13:33

Symptoms

After configuring Azure Active Directory as a SAML 2.0 External Identity Provider, an error occurs on sign-in:

AADSTS700016: Application with identifier 'api://platform.abbyy.cloud/XXXXXXXXXXXXX' was not found in the directory 'XXXXXX'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.

Cause

Most probably, the Application ID URI has been specified incorrectly with tenant ID containing hyphens:

Resolution

Make sure the tenant ID is specified without hyphens according to the public documentation:

AU: Setting up Azure Active Directory to be used as a SAML 2.0 External Identity Provider

EU: Setting up Azure Active Directory to be used as a SAML 2.0 External Identity Provider

US: Setting up Azure Active Directory to be used as a SAML 2.0 External Identity Provider