We have implemented the Custom SSO 2 years back which is working perfectly fine but after Salesforce has Phishing-Resistant MFA Enforcement we wanted to apply Standard SSO for All users but we were not able to set it up. We were not able to login using Standard SSO and we are not able to see the failed login attempt in Login History of that user. Sometimes we login but We were not getting the ACR and AMR values in the login parameters. Case was raised but Salesforce support team says that the changes needs to be done from IDP side and when we connect with Google team(IDP is google), they say they do not have the details or articles to proceed further. How should we resolve this issue? We are getting the following error: App not configured for this user. Thanks in Advance.
acr/amr values do need to be sent by IDP in saml assertion, there is nothing you can do about that in salesforce. But error you are getting in strange, ideally you should see some saml error and also something in your login history. have you checked the saml assertion which is being posted, is that being posted to correct ACS endpoint? use SAML chrome extension for testing.
