You are not allowed to access this site with account [ ]. Issuer was [ ].

[vaibhavmalushte]

Hi,

I am getting below error.

You are not allowed to access this site with account [ ]. Issuer was [ ].

Kindly advise.

Thank you,
Vaibhav

[gotdibbs]

I'm a .NET dev with limited PHP experience, but I also just received this error and was able to work around it. I by no means understand the inner workings of PHP or MediaWiki, but this is what I did:

1. The variable $wgAuthRemoteuserIssuers in the AuthAzureEasyAuth.php should actually be $wgAuthAzureEasyAuthIssuers.
2. I had no claim provided by Azure AD for UPN. I used the emailaddress claim instead as seen below.

private function getUpn()
{
    #return $this->getClaim("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn");
    return $this->getClaim("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress");
}

@vaibhavmalushte I think you may have even more issues thought as your issuer is coming across blank. Mine came through matching the value from LocalSettings.php.