Unable to login to Azure IPAM - request for assistance

[bsabri2023]

Hello IPAM Community Developers,
I am reaching out to inquire about an issue I'm experiencing with Azure IPAM. Despite being a global administrator, I am unable to log in. I have granted the necessary API cosent/permissions for both ipam-ui-app and ipam-engine-app using my Global Administrator, as shown in the attached screenshots. However, I still encounter this error in ipam-ui-app > Sign-in logs:

Authentication requirement
Single-factor authentication
Status
Failure
Continuous access evaluation
No
Sign-in error code
500011
Failure reason

The resource principal named {name} was not found in the tenant named {tenant}. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.
Additional Details

Developer error - the app requested access to a resource (application) that isn't installed in your tenant. If you expect the app to be installed, you may need to provide administrator permissions to add it. Check with the developers of the resource and application to understand what the right setup for your tenant is.

I closely followed the official IPAM documentation for deployment. I have checked the setup and cannot identify any apparent issues in IPAM app log stream console. Additionally, I have implemented a private endpoint and integrated it with the virtual network in the IPAM app. Furthermore, I've implemented a private endpoint in the Cosmos DB account, and all private DNS resolutions appear to be functioning correctly.

Could you please provide guidance on how to resolve this issue and successfully log in to IPAM? I appreciate your support and assistance.

Thank you,

[bsabri2023]

Is this SAML and Expose an API configuration is correct ?

[DCMattyG]

Hi @bsabri2023, it seems you are manually deploying the App Registrations and this is likely the root cause of your issue. There is some complex configuration that needs to happen for both of the App Registrations and I have built all of that into the Deployment Script which is contained within the repo.

Have you seen the deployment guide which is available below?

https://azure.github.io/ipam/#/deployment/README