I am at wit's end with this issue.
We have an application which uses python3-saml to authenticate users. They use Azure Active Directory with MultiFactor as authentication method.
When connecting to the application, they get the following error: AADSTS75011
According to Microsoft, this is an authentication method mismatch: https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/error-code-aadsts75011-auth-method-mismatch
Our application is requesting password authentication but the users are already signed in with MultiFactor therefore causing the error. The current workaround is to have the users connect using private browsing but it is causing a lot of headaches.
The easiest option would be to disable requestedAuthnContext from python3-saml by setting the value to False in the advanced_settings.json file, the instructions can be found here: https://github.com/onelogin/python3-saml
Well, that didn't work. My advanced_settings.json file looks like this:
{
"security": {
"requestedAuthnContext": false
}
}