Jenkins SAML + Azure AD

[jan....@payconiq.com]

Hi, I'm trying to configure SAML authentication with Jenkins via Azure AD.

Right now I'm running Jenkins in Docker on my local machine to prevent locking out myself from our prod.

I'm using this plugin: 

https://wiki.jenkins.io/display/JENKINS/SAML+Plugin

I did all configuration in Jenkins and I'm still receiving an exception.

My config in AAD:
Identifier: http://localhost:8888/securityRealm/finishLogin

Reply URLs: https://localhost:8888/securityRealm/finishLogin, http://localhost:8888/securityRealm/finishLogin

I downloaded Metadata and pasted it in Jenkins.

Can someone please give me a tip how to debug this issue? 

The error I'm receiving is:

org.pac4j.saml.exceptions.SAMLException: No valid subject assertion found in response
	at org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateSamlSSOResponse(SAML2DefaultResponseValidator.java:313)
	at org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validate(SAML2DefaultResponseValidator.java:138)
	at org.pac4j.saml.sso.impl.SAML2WebSSOMessageReceiver.receiveMessage(SAML2WebSSOMessageReceiver.java:77)
	at org.pac4j.saml.sso.impl.SAML2WebSSOProfileHandler.receive(SAML2WebSSOProfileHandler.java:35)

[Ivan Fernandez Calvo]

It never gonna work Azurre cannot reach your service http://localhost:8888/securityRealm/finishLogin to send the SAMLResponse, both machines have to have visibility it is a basic premise for SAML