title: Azure AD > Google Apps SSO
body: <p>I've using Azure Active Directory to drive SSO to Google Apps.</p>
  
  <p>Following this tutorial I've completed all setup: <a href="https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-google-apps-tutorial" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-google-apps-tutorial</a></p>
  
  <p>However, when I try to login with a user I receive the following error:</p>
  
  <blockquote>
    <p>AADSTS65005: Invalid resource. The client has requested access to a
    resource which is not listed in the requested permissions in the
    client's application registration. Client app ID:
    {GUID}. Resource value from request: .
    Resource app ID: {GUID}. List of valid
    resources from app registration: .</p>
  </blockquote>
  
  <p><strong>Google Apps SSO settings:</strong>
  <a href="https://i.stack.imgur.com/iHoLK.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/iHoLK.png" alt="enter image description here"></a></p>
  
  <p><strong>App Registration Required Permissions</strong> </p>
  
  <p><a href="https://i.stack.imgur.com/kJsLk.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/kJsLk.png" alt="enter image description here"></a></p>
  
  <p><strong>Resultant error on login to Google Apps</strong></p>
  
  <p><a href="https://i.stack.imgur.com/6HM77.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/6HM77.png" alt="enter image description here"></a></p>
  
  <p>Provisioning works and the SAML auth has been tested and is successful - any help is much appreciated!</p>