During the setup of SSO (Single Sign-on) there are some potential traps you can experience, if you prepare your AD (Active Directory) for connection.

We also provide a best practise guide on a full configuration: How do I set up my Azure AD for a BOC product?

Error 1: "Application with identifier "wrong_issuer_name was not found in the directory."

Solution 1: Use correct Identifier (Entity ID)

Open Manage (1) and Single sign-on (2) in your ADOxx AD Application. Click on Edit (3) and change the name to the one provided by BOC technical support.

Error 2: "Your administrator has configured the application "[ADOXX]" to block users unless they are specifically granted ('assigned') access to application."

Solution 2a: Add user/group

Open Manage (1) and Users and groups (2) of your ADOxx AD Application and define users and groups, which should have access to your BOC Management Office Product via the Add user/group (3) Option.

Solution 2b: Disable "Assignment requirement"

Open Manage (1) and Properties (2) of your ADOxx AD Application and disable "Assignment required" by switching to NO (3). Now, every AD User has access to the AD Application.