How to Resolve the AADSTS750054 Error of Microsoft Entra ID in Auth0

Last Updated: Oct 19, 2026

Overview

When Auth0 is configured as a SAML Service Provider (SP) and Microsoft Entra ID is the Identity Provider (IdP), a SAML error occurs after successful authentication with Entra ID. Auth0 sends the SAML request using HTTP-POST binding by default, but Entra ID requires HTTP-Redirect binding, producing the following error:

Error AADSTS750054 - SAMLRequest or SAMLResponse must be present as query string parameters in HTTP request for SAML Redirect binding

Correcting the Protocol Binding field in the Auth0 SAML connection settings resolves the issue.

Applies To

Microsoft Entra ID
Security Assertion Markup Language (SAML)
AADSTS750054

Cause

The Auth0 SAML connection sends the SAML request using HTTP-POST binding when the Protocol Binding field is set, but Entra ID requires the request to arrive via HTTP-Redirect binding as a query string parameter. This mismatch causes Entra ID to return error "AADSTS750054" after the user authenticates.

Solution

How is the Protocol Binding section configured?

Configure the Protocol Binding section either by leaving the field empty or by explicitly setting it to HTTP-Redirect.

Leave the Protocol Binding section empty.

Leave the Protocol Binding section of the SAML Enterprise connection empty to ensure Auth0 sends the SAML request as a query parameter, as demonstrated in the following SAML authentication request template image.

Set the Protocol Binding field to HTTP-Redirect.

Set the Protocol Binding field to HTTP-Redirect to explicitly configure Auth0 to use the binding method that Microsoft Entra ID requires, as demonstrated in the following code snippet and SAML authentication request template image below.

<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
    ForceAuthn="true"
    ID="@@ID@@"
    IsPassive="false"
    IssueInstant="@@IssueInstant@@"
    ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
    Version="2.0">
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">@@Issuer@@</saml:Issuer>
</samlp:AuthnRequest>