Azure AD and shibboleth IdP integration

[Raja V, Scientist - C (CS)]

Hi,
We are trying to integrate Azure AD with shibboleth by following document
available at
https://wiki.shibboleth.net/confluence/display/KB/Using+SAML+Proxying+in+the+Shibboleth+IdP+to+connect+with+Azure+AD

However, after authentication, we are getting the following error. Can
anyone help us out?




*2021-02-01 11:21:53,314 - 10.0.7.6 - INFO [Shibboleth-Audit.SSO:282] -
10.0.7.6||2021-02-01T05:51:53.314018Z||https://sts.windows.net
<https://sts.windows.net>******/|_282b0ffa-9537-4b9c-9444-bbaf4bee7700|password|2021-02-01T04:42:10.204Z|azureObjectidentifier,azureIdentityprovider,azureGivenname,azureDisplayname,azureAuthnmethodsreferences,azureTenantid,azureEmailaddress,azureSurname|email at email.org
<email at email.org>|emailAddress||false||Redirect|POST||Success|||Mozilla/5.0
(Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/88.0.4324.104 Safari/537.362021-02-01 11:21:53,388 - 10.0.7.6 -
ERROR [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:78]
- Profile Action SelectSubjectCanonicalizationFlow: No potential flows left
to choose from, canonicalization will fail2021-02-01 11:21:53,390 -
10.0.7.6 - INFO
[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:142] - Profile
Action SelectAuthenticationFlow: Moving incomplete flow authn/SAML to
intermediate set2021-02-01 11:21:53,390 - 10.0.7.6 - INFO*
[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:316] - Profile
Action SelectAuthenticationFlow: No potential flows left to choose from,
authentication failed
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210201/f39a23f2/attachment.htm>