Using Marketo Universal ID with Azure SSO

[dsm_rajni]

Hi fellow Marketo users,
I have a query about using Universal ID along with SSO enabled.
We have 2 Marketo instances (Sandbox & Production) which are connected via Universal ID. We also have configured Azure SSO for both the instances, however the switching between the 2 instances doesn't seem to work when we are logged in via SSO. Has anyone experienced something similar? Any insights in the matter will be very helpful.  

PS: In AzureAD as we cannot setup multiple applications with the same EntityID, we customized the entityID of both instances to make them unique and configured them in same Azure tenant.

[AWmindtree]

Hi @dsm_rajni 

Can you confirm if you are entering same the login URL of the Identity Provider in the Login URL field while setting up SSO? 

[dsm_rajni]

Yes, @AWmindtree we are putting the same Login URL in the Admin > SSO> Redirect page settings for both instances. 

[Britney_Young1]

Did you ever get a resolution to this? I'm having the same issue.

[Darshil_Shah1]

@Britney_Young1 and @dsm_rajni, you could try the below troubleshooting steps, and if the issue persists, I'd recommend reaching out to Marketo support. You should probably also include details about the troubleshooting step you've already taken and a video of the screen share wherein you're facing issues while switching instances once logged in via the SSO to reduce any back and forth:

Potential Causes and Troubleshooting Steps:

1. EntityID and Assertion Consumer Service (ACS) URL Configuration:

   • Double-check consistency: Ensure the EntityID and ACS URL for each Marketo instance match exactly between Azure AD and Marketo's Single Sign-On settings.

2. Session Management and Logout Behavior:

   • Clear browser cache and cookies: This often resolves session-related issues.
   • Test full logout: Log out completely from both Marketo and Azure AD, then try logging back in.
   • Consider logout behavior: If using a custom logout URL, ensure it initiates a complete SSO logout process.

3. Azure AD Configuration:

   • Consider conditional access: Verify that conditional access policies aren't inadvertently restricting instance switching.

4. Marketo Universal ID Configuration:

   • Revalidate settings: Double-check the Universal ID configuration in both Marketo instances for accuracy.

Marketo Support: If issues persist, engage Marketo Support for assistance with Universal ID setup and potential troubleshooting.