Munkireport

#public #munki #azuread #saml

notes

FIDO error

You might encounter an error relating to FIDO when using yubikey or similar to authneticat with SAML with munkireport.

Message: AADSTS75011: Authentication method 'X509, MultiFactor' by which the user authenticated with the service doesn't match requested authentication method 'Password, ProtectedTransport'.

The solution is similar to SSO issue with Slack on Azure AD joined machine
Set the following env on your munkireport server to false (the default is true)

AUTH_SAML_SECURITY_REQUESTED_AUTHN_CONTEXT=false

ref. SAML authentication · munkireport/munkireport-php Wiki · GitHub