https://gingersysadmin.com/tags/sso/ Recent content in Sso on The Ginger Sysadmin Blog Hugo en-us Tue, 18 Aug 2026 08:19:01 -0500 https://gingersysadmin.com/posts/saml-openvpn-as-passkeys/ Tue, 18 Aug 2026 08:19:01 -0500 https://gingersysadmin.com/posts/saml-openvpn-as-passkeys/ <p><em>Updated 08/29/26 - A support case I opened with OpenVPN&rsquo;s engineers confirmed this solution. Despite multiple attempts to use other contexts like SmartcardPKI and SoftwarePKI, disabling AuthnContexts appears to be the only supported option. OpenVPN support sent me <a href="https://support.openvpn.com/hc/en-us/articles/19682300520219-Access-Server-AADSTS75011-Authentication-method-SAML-Azure-Error" target="_blank" rel="noopener">this article</a> in reply to my case.</em></p> <h1 id="problem">Problem</h1> <p>OpenVPN Access Server is set up with SAML and uses Microsoft Entra (could apply to other IDPs though) for authentication.</p> <p>When attempting to move to passwordless authentication for Microsoft Entra, you encounter the error &ldquo;AADSTS75011: Authentication method &lsquo;MultiFactor, Fido&rsquo; by which the user authenticated with the service doesn&rsquo;t match requested authentication method &lsquo;Password, ProtectedTransport&rsquo;&rdquo; after authenticating to Microsoft Entra and before being passed back to OpenVPN Access Server.</p>