Dynatrace Mobile App Error Logging in Through Azure AD

[echwallah]

My client uses SSO to log in to Dynatrace environment and their iDP is Azure AD. The customer ehile trying tolog in to the environment using the Mobile App is presented with an error "No App Found to Open URL".

Screenshot is shared above.

How can we resolve this?

[PierreGutierrez]

Hello @echwallah 
I have an example with a customer configured with SSO that uses IDP Azure AD for access to Dynatrace SaaS, for login I use the cliet's corporate email I logged in without any problem.

Likewise, I will share with you where I have placed the email (pierre@domain_customer.com) to ensure that you are testing in the same way.

I hope that help you 💪

[echwallah]

Thanks @PierreGutierrez I am still not seeing the solution that could be causing the issue here. Is there something on the Dynatrace Enterprise App I need to configure? Or something on the Azure Portal?

[PacoPorro]

Is the Dynatrace url accesible from internet?

[echwallah]

Hi The client is on a SAAS tenant but they access the environment using their Azure iDP provider for SSO so they are using corporae credentials to log into Dynarace even from the web UI. This issue is affecting the Dynatrace Mobile App while trying to log into the environment.

[PierreGutierrez]

Hi @echwallah with that customer was not necessary to add any configurate.  
Also In the documentation don't speak about of any configurate 

 https://docs.dynatrace.com/docs/shortlink/dynatrace-mobile-app#connect-your-dynatrace-environments-w... 

For the example that I posted, I used iphone  and Dynatrace mobile app version 4.0.8 .
Can you check or try with the same?


 

[cesarsaravia]

Hi @echwallah 
Quick questions:

1. which version of DT app are you using? Screenshot of app store or play store
2. which operating system are you using?
3. is the login button redirecting to SSO login of Dynatrace?
4. could you share with us more images or if better a recorded video of your login?

Regards,

[echwallah]

Hi @cesarsaravia let me gather this information and revert

[echwallah]

Hi @cesarsaravia Dynatrace App ast update 22 March 2024, Android version 12

[y_buccellato]

Just to be on the same page:

• to integrate with SSO you have requested a Service Principal to be created on your behalf.
• When an AD admin creates a service principal it usually applies rules to the type of device that can consume it via SSO.
• For example in my case a configuration was made into the Azure service principal that SSO is possible for anyone using corporate email + but dt mobile app should not be accessed via SSO if mobile device isn't corporate.

So what I'm saying is that maybe by default there are rules applied to the service principal that you might not be aware since this is usually something obscure to the Dynatrace admin and delegated to AD expert.

review the service principal created for SSO with your Ad expert and search for any policy that might prevent somebody to access mobile app from the type of mobile device that you are using.

Best of luck

[echwallah]

Hi @y_buccellato Let me reach out to the AD Expert and relay the same so that we can have see how to resolve.

So basically in my understanding, this is not a Dynatrace related issue but something/some configuration on the AD Side?

[y_buccellato]

It is a possibility. Still a remote one since it's hard to focus on your specific use case.

[echwallah]

@y_buccellato what could be other possibiities having known it is a SAAS tenant, Access is through Azure AD. The Dynatrace Ap is not a different App but the same one found in Google An Apple Store.

I am trying to wonder are you suggesting a possibility this issue could be an issue on Dynatrace side?

Why am I asking this is to specifically narrow down by itemizing all the scenarios that can cause this issue to occur. Are we using the wrong App Version for instance?

[echwallah]

Hi @cesarsaravia @y_buccellato I have received additional information on this issue. The Applicatioon throws that error whenever the User launches the App meaning even before entering username and credentials ancd clicking login. Basically it says " No App found to open URL" Immediately on Application Launch. Does this indicate an issue on the App itself or what could be causing this?