During the setup of SSO (Single Sign-on) there are some potential traps you can experience, if you prepare your AD (Active Directory) for connection.

We also provide a best practise guide on a full configuration: How do I set up my Azure AD for a BOC product?

Error 1: "Application with identifier "wrong_issuer_name was not found in the directory."

Solution 1: Use correct Identifier (Entity ID)

Open Manage (1) and Single sign-on (2) in your ADOxx AD Application. Click on Edit (3) and change the name to the one provided by BOC technical support.

Error 2: "Your administrator has configured the application "[ADOXX]" to block users unless they are specifically granted ('assigned') access to application."

Solution 2a: Add user/group

Open Manage (1) and Users and groups (2) of your ADOxx AD Application and define users and groups, which should have access to your BOC Management Office Product via the Add user/group (3) Option.

Solution 2b: Disable "Assignment requirement"

Open Manage (1) and Properties (2) of your ADOxx AD Application and disable "Assignment required" by switching to NO (3). Now, every AD User has access to the AD Application.

Error 3: Cannot log into BOC Product via SSO

If you are unable to log in via SSO, it may be because the Identity Provider (IDP) does not recognize your BOC Product as a trusted website.

Solution 3: Add Adonis URL as a trusted provider

Ask your IDP admins (for example, your Okta admins) to add the BOC Product URL as a trusted provider in your Identity Provider configuration. If the issue persists after this change, contact your IT admins for further assistance.