URI mismatch with OAuth

Jeff Kohl-coa 1 Reputation point
2022-10-06T20:06:29.193+00:00

Using open source ticketing system that is supposedly OAuth enabled (os Ticket) but getting URI mismatch error from Azure

The redirect URI 'xxxxxxxx" specified in the request does not match the redirect URIs configured for the application 'yyyyyyyyy'. Any suggestions the app is on a linux VM and I did include the localhost parameter as suggested in Azure. Troubleshooting is pretty difficult. Any ideas?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

2 answers

Sort by: Most helpful
  1. MaximM 11 Reputation points
    2022-10-06T20:13:08.403+00:00

    Use the actual URL of the app . So if you are accessing it using https://<app>.<domain> then use that. If you are accessing it using http(s)://<IP address> then use that instead. Note that the app must be configured for those URLs (depending on the app you can usually go in the settings and configure the URL).

    0 comments No comments

  2. JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator
    2022-10-20T15:58:12.54+00:00

    @Jeff Kohl-coa
    Thank you for your post and I apologize for the delayed response!

    Error Message:
    The redirect URI 'xxxxxxxx" specified in the request does not match the redirect URIs configured for the application 'yyyyyyyyy'.

    From your error message and since the App that you're using is on a Linux VM. If you're using the Local Host parameter (Redirect URI), you'll have to make sure that this same URI is also listed in the Azure AD App. For more info - Error AADSTS50011.

    Resolution:

    1. Copy the <GUID> value from the error message. This is your application (client) ID.
    2. Go to the Authentication blade of your application in the Azure portal. You can open the page directly by inserting your application ID as the GUID value in one of the following links below.
    3. Copy the <redirect URI> value from the error message.
    4. Add the redirect URI to the appropriate platform configuration. This might be the web, single page app, or some public/native client platform. Make sure to save the input after the redirect URI is added.
    5. Wait a few minutes, and then send the request again.
    • If this app is owned by an organization (Azure AD tenant), use:
      Note: Make sure that you sign into the portal by using an administrator account for that organization, or an account that owns the application.
      https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Authentication/appId/<GUID>
    • If this app is owned by your personal Microsoft (MSA) account, use:
      Note: Make sure that you sign into the portal by using your personal Microsoft account.
      https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/Authentication/appId/<GUID>/isMSAApp/true

    252537-image.png

    Additional Link:
    Redirect URI (reply URL) restrictions and limitations

    I hope this helps!

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.