SSO failing during User Enrollment

[adminnewbie]

Hi, new Jamf admin and not very knowledgeable about the inner workings of SSO. 

I have configured SSO to our Entra ID domain and the web log into Jamf Pro and Account and no issues with log in with my account or a test account.

I have been able to have devices enrolled successfully when the device (iOS only) is in ABM and have moved on to set up User Self Enrollment.   When the test user account, goes to register, at: domain.jamfcloud.com/enroll, the user is directed to the Microsoft log in.  After the credential are entered the process fails with the error : "Sorry, but we're having trouble signing you in" message with the AADSTS650056 error. 

I've found a few suggestions here on JamfNation, but they haven't resolved the issue.

• SSO Azure AD - Misconfigured application 
• Cloud Identity providers has been set up and tested successfully
• redid the MS Application set up
• ensured: Jamf Pro > Settings > System > Single Sign On > Enable Single Sign On for user authentication during enrollment > Any identity provider user is set correctly
• Turned off MFA for the Test user 
• Used a private Browser

I'm currently working with support, but any suggestions to try would be appreciated. 

[adminnewbie · Accepted solution]

Working with support, we deleted the Jamf Pro application from Entra and redeployed it.  Seems it was not configured correctly.  So problem was probably user induced.  Still odd that 2 different SSO sets ups are used, but I'm learning.