# שגיאת AzureAD AADSTS7500525 באמצעות תוסף SAML

**URL:** <https://meta.discourse.org/t/azuread-error-aadsts7500525-using-saml-plugin/212092>\
**Category:** SSO\
**Created:** [14 בדצמבר,‏ 2021,‏ 7:51pm UTC](https://meta.discourse.org/t/azuread-error-aadsts7500525-using-saml-plugin/212092 "2021-12-14T19:51:14Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![Bruno\_Salazar](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bruno_salazar/32/217698_2.png) [@Bruno\_Salazar](https://meta.discourse.org/u/Bruno_Salazar)\
**Post date:** [14 בדצמבר,‏ 2021,‏ 7:51pm UTC](https://meta.discourse.org/t/azuread-error-aadsts7500525-using-saml-plugin/212092/1 "2021-12-14T19:51:15Z")

</div>

Hi!!

We had the SAML plugin working with our AzureAD, but yesterday after we upgraded to the last commit, we started seeing the following errors when users try to authenticate via SAML:

```plaintext
Sign in
Sorry, but we’re having trouble signing you in.

AADSTS7500525: There was an XML error in the SAML message at line 1, position 1. Verify that the XML content of the SAML messages conforms to the SAML protocol specifications.

```

This link [Azure AD SAML2 request rejected: AADSTS7500525 - Microsoft Q&A](https://docs.microsoft.com/en-us/answers/questions/293577/azure-ad-saml2-request-rejected-aadsts7500525.html) suggests that this can be caused by “Compressed SAML Authentication Requests” which AzureAD doesn’t support.

December commits have lots of changes on SAML (configuration via site settings, for example), but I was unable to figure out if there was some change related to SAML requests that may have caused this.

SAML config (working OK until the update):

```plaintext
## Saml plugin setting
  DISCOURSE_SAML_TARGET_URL: https://login.microsoftonline.com/<<our app id>>/saml2
  DISCOURSE_SAML_CERT_FINGERPRINT: "<<our fingerprint>>"
  DISCOURSE_SAML_REQUEST_METHOD: POST
  #DISCOURSE_SAML_FULL_SCREEN_LOGIN: true
  DISCOURSE_SAML_CERT: "-----BEGIN CERTIFICATE-----
<<Our cert payload>>
-----END CERTIFICATE-----"
  DISCOURSE_SAML_SYNC_GROUPS: true
  DISCOURSE_SAML_GROUPS_ATTRIBUTE: http://schemas.microsoft.com/ws/2008/06/identity/claims/role
  DISCOURSE_SAML_GROUPS_FULLSYNC: true

```

How can I enable the auth debug to get more info about this?

---

_[View the full topic](https://meta.discourse.org/t/azuread-error-aadsts7500525-using-saml-plugin/212092)._