# Upgrading to 1.8.0.beta9 breaks Azure SSO

**URL:** https://meta.discourse.org/t/upgrading-to-1-8-0-beta9-breaks-azure-sso/60125
**Category:** Support
**Created:** [29 maart 2017 om 18:18 UTC](https://meta.discourse.org/t/upgrading-to-1-8-0-beta9-breaks-azure-sso/60125 "2017-03-29T18:18:36Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sberkovitz](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@sberkovitz](https://meta.discourse.org/u/sberkovitz)
#### Post date: [29 maart 2017 om 18:18 UTC](https://meta.discourse.org/t/upgrading-to-1-8-0-beta9-breaks-azure-sso/60125/1 "2017-03-29T18:18:36Z")

</div>

After upgrading our instance from 1.8.0.beta8 to beta9, our SSO via Azure Active Directory stopped working. Any user attempting to authenticate would receive the message “Sorry, there was an error authorizing your account. Perhaps you did not approve authorization?”.

The error comes from Azure AD that the reply URL being sent does not match the configured (in AAD) reply URL.

Azure was expecting

`http://discourse.example.com/auth/azure_oauth2/callback`

But is actually receiving something like

`http://discourse.example.com/auth/azure_oauth2/callback?code=LONG_BASE64_STRING&session_state=SOME_GUID`

It looks like some of the payload is being sent via the query string instead of POST. I had to roll-back to beta 8 in order to restore service.

I don’t see any commits specifically about oauth/SSO changes however I see the OAUTH gem was upgraded from 1.0.0 to 1.3.1. omniauth was changed from 1.3.1 to 1.6.1 and omniauth-oauth from 1.3.1 to 1.4.0

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [29 maart 2017 om 18:19 UTC](https://meta.discourse.org/t/upgrading-to-1-8-0-beta9-breaks-azure-sso/60125/2 "2017-03-29T18:19:18Z")

</div>

I believe @eviltrout looked at a similar issue yesterday.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [29 maart 2017 om 18:33 UTC](https://meta.discourse.org/t/upgrading-to-1-8-0-beta9-breaks-azure-sso/60125/3 "2017-03-29T18:33:04Z")

</div>

Thanks for reporting it. I’ve updated the [discourse-azure-ad](https://github.com/discourse/discourse-azure-ad) plugin. If you update it everything should work again!

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [29 maart 2017 om 18:48 UTC](https://meta.discourse.org/t/upgrading-to-1-8-0-beta9-breaks-azure-sso/60125/4 "2017-03-29T18:48:37Z")

</div>