Hello, I am currently struggling with setting up EntraID Auth via OIDC for SSO on the VDAs in our lab environment.. Everything is setup and should be working fine, but after logging in with MFA I get the error: "no authorization server could be contacted" on the Netscaler Gatway. After checking some stuff I found that the OAuth Action is stuck in a CertFetch... login.microsoftonline.com is reachable over 443 and the cert chain itself looks fine. I can't even trace the logon on the Gateway, I am running out of ideas here. Somebody faced this issue in the past? The rest looks fine Client Secret, Authrization/Token Endpoints are 100% correct.

So some common problems I have seen that does this. 1. Time wrong on NetScaler 2. NSIP and SNIP for default routes can't get to microsoftonline.com 3. Entra App Registration has the wrong redirect URI

SNIP route was blocked - it is working now 🙂