Not able to setup azure sso login to self hosted sentry

[Chethanibms]

Problem Statement

Geeting below error while setting up sso login through microsoft azure
Followed below document to setup
https://docs.sentry.io/organization/authentication/sso/azure-sso/

Below are the sentry web logs

2024-12-19T12:48:58.766233124Z Traceback (most recent call last):
2024-12-19T12:48:58.766280663Z   File "/.venv/lib/python3.12/site-packages/django/core/handlers/exception.py", line 55, in inner
2024-12-19T12:48:58.766295420Z     response = get_response(request)
2024-12-19T12:48:58.766306781Z                ^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766319876Z   File "/.venv/lib/python3.12/site-packages/django/core/handlers/base.py", line 197, in _get_response
2024-12-19T12:48:58.766326829Z     response = wrapped_callback(request, *callback_args, **callback_kwargs)
2024-12-19T12:48:58.766337168Z                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766348650Z   File "/.venv/lib/python3.12/site-packages/sentry_sdk/integrations/django/views.py", line 89, in sentry_wrapped_callback
2024-12-19T12:48:58.766356675Z     return callback(request, *args, **kwargs)
2024-12-19T12:48:58.766363838Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766370611Z   File "/.venv/lib/python3.12/site-packages/django/views/generic/base.py", line 104, in view
2024-12-19T12:48:58.766378415Z     return self.dispatch(request, *args, **kwargs)
2024-12-19T12:48:58.766385759Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766402090Z   File "/usr/src/sentry/src/sentry/silo/base.py", line 154, in override
2024-12-19T12:48:58.766413140Z     return original_method(*args, **kwargs)
2024-12-19T12:48:58.766425233Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766436173Z   File "/.venv/lib/python3.12/site-packages/django/utils/decorators.py", line 48, in _wrapper
2024-12-19T12:48:58.766446753Z     return bound_method(*args, **kwargs)
2024-12-19T12:48:58.766467822Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766474485Z   File "/.venv/lib/python3.12/site-packages/django/views/decorators/csrf.py", line 65, in _view_wrapper
2024-12-19T12:48:58.766481067Z     return view_func(request, *args, **kwargs)
2024-12-19T12:48:58.766487509Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766498910Z   File "/usr/src/sentry/src/sentry/web/frontend/base.py", line 407, in dispatch
2024-12-19T12:48:58.766511364Z     return self.handle(request, *args, **kwargs)
2024-12-19T12:48:58.766521413Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766531842Z   File "/usr/src/sentry/src/sentry/web/frontend/organization_auth_settings.py", line 281, in handle
2024-12-19T12:48:58.766543394Z     return helper.current_step()
2024-12-19T12:48:58.766554174Z            ^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766567869Z   File "/usr/src/sentry/src/sentry/pipeline/base.py", line 188, in current_step
2024-12-19T12:48:58.766581645Z     return self.dispatch_to(step)
2024-12-19T12:48:58.766592154Z            ^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766602193Z   File "/usr/src/sentry/src/sentry/auth/helper.py", line 759, in dispatch_to
2024-12-19T12:48:58.766612653Z     return step.dispatch(request=self.request, helper=self)
2024-12-19T12:48:58.766619045Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766627781Z   File "/.venv/lib/python3.12/site-packages/django/utils/decorators.py", line 48, in _wrapper
2024-12-19T12:48:58.766635255Z     return bound_method(*args, **kwargs)
2024-12-19T12:48:58.766646276Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766657637Z   File "/.venv/lib/python3.12/site-packages/django/views/decorators/csrf.py", line 65, in _view_wrapper
2024-12-19T12:48:58.766673998Z     return view_func(request, *args, **kwargs)
2024-12-19T12:48:58.766684317Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766701759Z   File "/usr/src/sentry/src/sentry/web/frontend/base.py", line 407, in dispatch
2024-12-19T12:48:58.766712610Z     return self.handle(request, *args, **kwargs)
2024-12-19T12:48:58.766722037Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766732356Z   File "/usr/src/sentry/src/sentry/auth/providers/saml2/generic/views.py", line 79, in handle
2024-12-19T12:48:58.766749999Z     return helper.next_step()
2024-12-19T12:48:58.766756662Z            ^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766765498Z   File "/usr/src/sentry/src/sentry/pipeline/base.py", line 235, in next_step
2024-12-19T12:48:58.766780847Z     return self.current_step()
2024-12-19T12:48:58.766797428Z            ^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766806635Z   File "/usr/src/sentry/src/sentry/pipeline/base.py", line 188, in current_step
2024-12-19T12:48:58.766814810Z     return self.dispatch_to(step)
2024-12-19T12:48:58.766824869Z            ^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766839406Z   File "/usr/src/sentry/src/sentry/auth/helper.py", line 759, in dispatch_to
2024-12-19T12:48:58.766849405Z     return step.dispatch(request=self.request, helper=self)
2024-12-19T12:48:58.766864193Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766870925Z   File "/usr/src/sentry/src/sentry/auth/providers/saml2/provider.py", line 73, in dispatch
2024-12-19T12:48:58.766879912Z     auth = build_auth(request, saml_config)
2024-12-19T12:48:58.766886564Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766898276Z   File "/usr/src/sentry/src/sentry/auth/providers/saml2/provider.py", line 435, in build_auth
2024-12-19T12:48:58.766905600Z     return OneLogin_Saml2_Auth(saml_request, saml_config)
2024-12-19T12:48:58.766943891Z            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766950764Z   File "/.venv/lib/python3.12/site-packages/onelogin/saml2/auth.py", line 57, in __init__
2024-12-19T12:48:58.766960593Z     self._settings = OneLogin_Saml2_Settings(old_settings, custom_base_path)
2024-12-19T12:48:58.766970231Z                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2024-12-19T12:48:58.766978877Z   File "/.venv/lib/python3.12/site-packages/onelogin/saml2/settings.py", line 128, in __init__
2024-12-19T12:48:58.766987223Z     raise OneLogin_Saml2_Error(
2024-12-19T12:48:58.767008522Z onelogin.saml2.errors.OneLogin_Saml2_Error: Invalid dict settings: sp_acs_url_invalid,sp_sls_url_invalid
2024-12-19T12:48:58.767026466Z 12:48:58 [ERROR] django.request: Internal Server Error: /organizations/talview/auth/configure/ (status_code=500 request=<WSGIRequest: POST '/organizations/talview/auth/configure/'>)
2024-12-19T12:48:58.768610835Z 12:48:58 [INFO] sentry.access.api: api.access (method='POST' view='sentry.web.frontend.organization_auth_settings.OrganizationAuthSettingsView' response=500 user_id='1' is_app='False' token_type='None' is_frontend_request='True' organization_id='None' auth_id='None' path='/organizations/talview/auth/configure/' caller_ip='172.16.18.183' user_agent='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36' rate_limited='False' rate_limit_category='None' request_duration_seconds=0.18566226959228516 rate_limit_type='DNE' concurrent_limit='None' concurrent_requests='None' reset_time='None' group='None' limit='None' remaining='None')
2024-12-19T12:48:59.239063995Z 12:48:59 [INFO] sentry.access.api: api.access (method='GET' view='sentry.api.endpoints.organization_projects.OrganizationProjectsEndpoint' response=200 user_id='1' is_app='False' token_type='None' is_frontend_request='True' organization_id='1' auth_id='None' path='/api/0/organizations/talview/projects/' caller_ip='172.16.18.183' user_agent='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36' rate_limited='False' rate_limit_category='None' request_duration_seconds=0.09107613563537598 rate_limit_type='DNE' concurrent_limit='None' concurrent_requests='None' reset_time='None' group='None' limit='None' remaining='None')

Can someone help with the issue

Solution Brainstorm

No response

[thdonatello]

The same!
I use sso login through keycloak.

[getsantry]

Routing to @getsentry/product-owners-settings-auth for triage ⏲️

[getsantry]

Assigning to @getsentry/support for routing ⏲️

[leedongwei]

Invalid dict settings: sp_acs_url_invalid,sp_sls_url_invalid

It seems like your Azure instance is passing custom keys to Sentry. If you google those strings, you'd find some StackOverflow answers that can help you config your Azure instance.

[getsantry]

This issue has gone three weeks without activity. In another week, I will close it.

But! If you comment or otherwise update it, I will reset the clock, and if you remove the label Waiting for: Community, I will leave it alone ... forever!

---

"A weed is but an unloved flower." ― Ella Wheeler Wilcox 🥀