SSO Frequently Asked Questions and Issues

Authentication method ... doesn't match requested authentication method ...

This error can occur after authenticating with your IDP, and prevents the user accessing AppCheck.

This occurs when your SSO settings in AppCheck contain a list of allowed authentication mechanisms (known as Authentication Contexts), and your user has logged in to your Identity Provider (IDP) using a mechanism that is not in that list.

There are three ways to resolve this issue:

1. (Recommended) In most cases there is no need to limit the allowed authentication mechanism within AppCheck when this is already controller at the level of your IDP.  To allow users to sign in to AppCheck using any authentication mechanism allowed in your IDP, simply remove the Authentication Contexts entries in your SSO settings in AppCheck.  An empty box means all Authentication Mechanisms are allowed.
2. Add the desired Authentication Context to your SSO settings within AppCheck.
3. Advise the user to log in using one of the permitted mechanisms.