AADSTS75011 Authentication method by which the user authenticated with the service doesn't match requested authentication method AuthnContextClassRef

[christianahug]

Using Azure AD as IdP, I get the following error:

AADSTS75011: Authentication method 'X509, MultiFactor' by which the user authenticated with the service doesn't match requested authentication method 'Password, ProtectedTransport'.

This appears to be a problem with parameters passed by the SAML request.
https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/error-code-aadsts75011-auth-method-mismatch

Is this something that can be fixed?

pfSense Version & Package Version:

• pfSense Version: 2.6.0
• Package Version: pfSense SAML2 Auth v1.1.2

Identity Provider Information:

• IdP Name: Azure AD

[Dedofugaz]

Put this on the Advanced Settings, it should do the workaround that Microsoft recommends:
{"security": { "requestedAuthnContext": false } }