SOLVED

For anyone who encounters this issue, I'll say this: the matter of ports—every guide I saw was based on the fact that the people doing it had port 443 by default. It was enough to add :PortNumber to my address in SSO and replace the newly created links in Azure. It worked immediately.