diff --git a/forge/ee/routes/sso/auth.js b/forge/ee/routes/sso/auth.js
index 3f5cea65c..fcaf7296a 100644
--- a/forge/ee/routes/sso/auth.js
+++ b/forge/ee/routes/sso/auth.js
@@ -34,6 +34,7 @@ module.exports = fp(async function (app, opts) {
 
     fastifyPassport.use(new MultiSamlStrategy({
         passReqToCallback: true, // makes req available in callback,
+        disableRequestedAuthnContext: true, // Helps make things work with Entra
         wantAssertionsSigned: false, // TODO: allow this to be set per provider
         async getSamlOptions (request, done) {
             if (request.body?.RelayState) {