Users can't log in using MFA

Products

• DX OpenExplore
• Observability

Issue/Introduction

After the latest SAML Auth update, users are unable to use MFA to log in to OpenExplore and are required to use a Username and Password instead. 

 

Sorry, but we're having trouble signing you in.

AADSTS75011: Authentication method 'MultiFactor, PasswordlessPhoneSignln' by which the user authenticated with the service doesn't match requested authentication method 'Password, ProtectedTransport'.

Contact the <appName> Wavefront application owner.

Cause

DX OpenExplore / Wavefront specifies which Authorization method we allow. This specification is setup per IDP (per metadata) basis. 

Resolution

Open a support ticket, providing the below details:

1. New IDP metadata file
2. Error message
3. Request we "set ignoreACClassRef"

Additional Information

Microsoft Learn: Error - AADSTS75011

Single-Tenant Authentication and Self-Service SAML SSO