SAML Single Sign-On (SSO) fails for the Mobicontrol application when integrated with Entra. The following error occurs after a user is successfully authenticated with Okta and is redirected to Entra:
Sorry, but we're having trouble signing you in.
AADSTS901172: Invalid request. Multiple values are present for a single value claim.
- Mobicontrol
- Microsoft Entra / Microsoft Azure
- Microsoft 365 / Office 365 (M365 / O365)
- Single Sign-On (SSO)
Entra expects users to have Multi-Factor Authentication (MFA) enabled for Office 365 user authentication. This error occurs when MFA is not enforced for Office 365.
Enforce MFA for the Office 365 application hosted on Okta.
For example, the rule should have either Any 2 factor types or Password / IdP + Another factor set in the User must authenticate with setting.
Related References
For more information about Entra MFA, please see the following Microsoft articles:
