Azure AD works fine

[ppolushkin]

I just checked your demo on Microsoft Azure AD and it works fine to me. The only think I touched is
configuration of ServiceProviderIssuer and IdentityProviderIssuer. I put my example here.

sp := &saml2.SAMLServiceProvider{
	IdentityProviderSSOURL:      metadata.IDPSSODescriptor.SingleSignOnServices[0].Location,
	ServiceProviderIssuer:       "myApp",
	IdentityProviderIssuer:      "https://sts.windows.net/some-guid/",
	AssertionConsumerServiceURL: "https://localhost:8080/api/sso-reply",
	SignAuthnRequests:           true,
	AudienceURI:                 "http://localhost:8080/api/sso",
	IDPCertificateStore:         &certStore,
	SPKeyStore:                  randomKeyStore,
}

Thank you! Hope it might help.

[angusshire]

My understanding was that the ServiceProviderIssuer and AudienceURI both refer to the SP entity ID. Are these two not the same?