title: Office365/Azure AD with G Suite as SAML Identity Provider
body: <p>I am trying to follow articles 
  <a href="https://msdn.microsoft.com/en-us/library/azure/dn641269.aspx" rel="nofollow noreferrer">https://msdn.microsoft.com/en-us/library/azure/dn641269.aspx</a>
  <a href="https://support.google.com/a/answer/6363817?hl=en" rel="nofollow noreferrer">https://support.google.com/a/answer/6363817?hl=en</a></p>
  
  <p>for domain school.edu</p>
  
  <p>When I open a private browsing window and go to login.microsoftonline.com and specify a user at my domain, I am redirected as expected to Google for login &amp; password. However, after entering valid credentials, I am redirected to a Microsoft login page with the error</p>
  
  <p>I get error 
  Additional technical information:
  Correlation ID: [redacted, not sure if this is a sensitive ID]
  Timestamp: 2017-05-11 19:15:31Z
  AADSTS50107: Requested federation realm object '<a href="https://accounts.google.com/o/saml2?idpid=" rel="nofollow noreferrer">https://accounts.google.com/o/saml2?idpid=</a><em>[id]</em>' does not exist.</p>
  
  <p>The URL listed there returns a 404 when accessed directly, but <a href="https://accounts.google.com/o/saml2/idp?idpid=" rel="nofollow noreferrer">https://accounts.google.com/o/saml2/idp?idpid=</a><em>[id]</em> can be accessed directly (albeit with an error for a malformed SAML request). I specified the idp?idpid=[id] as the LogOnUri over powershell but it does not seem to be pulling from that value there.</p>
  
  <p>I am unsure how to proceed from here, beyond opening a ticket with Microsoft (they were unable to help the last time we attempted SSO via different means, perhaps a year ago).</p>