I was recently working with Azure Active Directory (AD) and Auth0 for a new SAML (Security Assertion Markup Language) integration. The integration would use Azure AD as the Identity Provider (IdP) and Auth0 as the authorization service provider. To enable the integration I needed to create an App Registration in Azure AD. I won’t go into much detail about that process here, creating the App Registration was fairly straightforward.
The error I received was:
AADSTS700016: Application with identifier ‘<URN>’ was not found in the directory ‘<TENANT ID>’. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.
For my integration, the Application ID did not match the URN) that was generated by Auth0. The error itself makes sense, finding where to update the Application Identifier was not as easy. I’ll blame my limited experience with Azure AD and a poor user interface design. Now that I know where to look, it’s obvious, at the time, and after much searching I didn’t find clear guidance on what to update and where. Here is what I learned.
The Uniform Resource Name (URN) is a unique value assigned by Auth0 to our Enterprise SAML connection. I could find the URN in my Auth0 console labeled Entity ID:
(I could also find it in the error message I received from Azure 😂)
The URN value needs to be assigned to the App Registration within our Azure AD console. To access the APP ID, select the Add an Application ID URI option in the Azure AD Console.
Within the Application ID view, select the Set option.
Update this value with the full URN of your application and select save
Now your App Registration in Azure AD should be linked to your application by the URN value.🤞