SSO login with MS Entra ID not working

[BentoAlves]

Hello.

I'm having trouble with SSO authentication on Microsoft Entra ID.

I've done all the configuration using the wiki article as a reference: https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect#microsoft-entra-id

Whenever I try to authenticate using SSO, I'm redirected to a page that doesn't exist.

Here's my setup.

My login page.

Page with redirect error.

Authentication process log

[2026-03-24 21:21:22.995][response][INFO] (web_files) GET /<p..> [10] => 404 Not Found
[2026-03-24 21:24:20.921][request][INFO] POST /api/organizations/domain/sso/verified
[2026-03-24 21:24:20.922][response][INFO] (get_org_domain_sso_verified) POST /api/organizations/domain/sso/verified => 200 OK
[2026-03-24 21:24:20.956][request][INFO] GET /identity/sso/prevalidate?domainHint=VW_DUMMY_IDENTIFIER
[2026-03-24 21:24:20.961][response][INFO] (prevalidate) GET /identity/sso/prevalidate => 200 OK
[2026-03-24 21:24:21.010][request][INFO] GET /identity/connect/authorize?client_id=web&redirect_uri=htt
[2026-03-24 21:24:21.360][response][INFO] (authorize) GET /identity/connect/authorize?<data..> => 307 Temporary Redirect

Diagnostic page

Has anyone been through this situation and found a solution?

[stefan0xC]

Based on the URL my guess would be that you made a mistake configuring the Web Redirect URI in Entra ID

[BentoAlves]

The redirect URI is configured exactly as per the documentation; it contains the address of my vault.

Both in the vault configuration and in the application configuration in MS EntraID.
The CallBack Path URL was pre-filled in the vault and matches the URL in the documentation.