The following Azure exception appears when an Azure Federated user tries to authenticate:
"AADSTS75011: Authentication method ‘X509, MultiFactor, X509Device’ by which the user authenticated with the service doesn’t match requested authentication method ‘Password, ProtectedTransport’. Contact the ActiveRoles application owner."
1.- From the ARS Server load below URL to load the STS Admin site:
https://<hostname>/RSTS/Admin
2.- Authenticate
3.- Click on "Authentication Providers"
4.- Select the Authentication Provider set for Azure.
5.- In the "Authn Context Classes" field, replace the details with the following:
urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified
6.- Hit Finish and test
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center