How to fix 'AADSTS900971: No reply address provided.' in MSAL Python

Question

How to fix 'AADSTS900971: No reply address provided.' in MSAL Python

Jake Blum 0

Hello there! I'm currently having some issues with MSAL Python where, when using acquire_token_interactive, I get an error that says "No reply address provided". This is odd, as the redirect is clearly configured with Auth0, as shown here in AAD:

Screen Shot 2023-01-22 at 2.45.17 PM

The code I am using is as follows (with specifics altered for privacy reasons). Any help would be much appreciated.

app = PublicClientApplication(
          'app_id',
          authority='https://login.microsoftonline.com/tenant_id'
      )   

token = None
token = app.acquire_token_interactive(scopes=['User.Read'])

if 'access_token' in token:
    return token['access_token']
    else:
        print(token.get("error"))
        print(token.get("error_description"))
        print(token.get("correlation_id"))
        exit(1)

Jake Blum 0 Reputation points

2023-01-28T21:59:32.7166667+00:00

Unfortunately, none of these worked. Any other suggestions?
Dimple Rane 921 Reputation points MVP

2023-01-30T02:31:42.83+00:00
To fix this issue, you can try the following steps:

Verify that the redirect URI configured in AAD for your application matches the one configured in Auth0.

Make sure the "Reply URLs" field in the Azure portal for the app registration in AAD has the same redirect URI you configured in the Auth0's application.

Verify that the application's client ID and tenant ID in your code match the values in AAD.

Check if the API permissions are granted to the application.

if everything seems to be in place and the problem persist, try to remove the application from AAD and add it again.

If the problem still persists after trying these steps, you can check the AAD logs to see if there is any additional information about the error.

1 answer

Your answer

Jake Blum 0 Reputation points

2023-01-28T21:59:32.7166667+00:00

Unfortunately, none of these worked. Any other suggestions?
Dimple Rane 921 Reputation points MVP

2023-01-30T02:31:42.83+00:00

To fix this issue, you can try the following steps:

Verify that the redirect URI configured in AAD for your application matches the one configured in Auth0.

Make sure the "Reply URLs" field in the Azure portal for the app registration in AAD has the same redirect URI you configured in the Auth0's application.

Verify that the application's client ID and tenant ID in your code match the values in AAD.

Check if the API permissions are granted to the application.

if everything seems to be in place and the problem persist, try to remove the application from AAD and add it again.

If the problem still persists after trying these steps, you can check the AAD logs to see if there is any additional information about the error.

Answer 1

Shweta Mathur 30,296 Microsoft Employee Moderator

Hi @Jake Blum ,

Thanks for reaching out.

The error you are getting is due to redirect URL configured in Azure AD xxx.auth0.com/login/xxxx is missing or not correctly configured in your Python application configuration.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

Jake Blum 0 Reputation points

2023-02-01T05:07:21.06+00:00

Dear @Shweta Mathur

Thanks for responding! Where can I configure this? I looked all through the documentation and there is no clear answer.

Jake

Shweta Mathur 30,296 Microsoft Employee Moderator

Hi @Jake Blum ,

In aad.config.json configuration file where you have configured your registered application details or in your case you can pass redirect uri where you are passing authority and client id.

{
"type": {
    "client_type": "CONFIDENTIAL",
    "authority_type": "SINGLE_TENANT",
    "framework": "FLASK"
    },
"client": {
    "client_id": "{enter-your-client-id-here}",
    "client_credential": "{enter-your-client-secret-here}",
    "authority": "https://login.microsoftonline.com/{enter-your-tenant-id-here}"
    },
"auth_request": {
    "redirect_uri": http://localhost:8080,
    "scopes": [],
    "response_type": "code"
    },
"flask": {
    "id_web_configs": "MS_ID_WEB_CONFIGS",
    "auth_endpoints": {
        "prefix": "/auth",
        "sign_in": "/sign_in",
        "edit_profile": "/edit_profile",
        "redirect": "/redirect",
        "sign_out": "/sign_out",
        "post_sign_out": "/post_sign_out"
    }
},

You can refer the sample here: https://github.com/Azure-Samples/ms-identity-python-flask-webapp-authentication for the configuration.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

Jake Blum 0 Reputation points

2023-02-01T14:25:23.58+00:00

Hi @Shweta Mathur ,

I get this error when I try to pass in redirecturi to acquire_token_interactive:

TypeError: obtain_token_by_browser() got multiple values for keyword argument 'redirect_uri'

And when I try to pass it into my client settings:

__init__() got an unexpected keyword argument 'redirect_uri'

any thoughts?

Jake
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-02-02T05:38:20.5533333+00:00

Hi @Jake Blum ,

I am not much aware about Python, but the error seems to be as configuration of redirect_uri is not correct.

TypeError: obtaintokenbybrowser() got multiple values for keyword argument 'redirect uri' occurs due to multiple values of 'redirect uri' while passing the values. Make sure you are passing single reference of redirect uri in your application.

init() got an unexpected keyword argument 'redirect_uri'. Here constructor class in not recognize the redirect uri as init method don't have that argument.

Could you please check the sample to acquire token interactive: https://github.com/AzureAD/microsoft-authentication-library-for-python/blob/dev/sample/interactive_sample.py

Did you try to update the redirect URI in portal with http://localhost?

Thanks,

Shweta
Jake Blum 0 Reputation points

2023-02-02T20:09:30.4633333+00:00

@Shweta Mathur ,

All of this is up to date in AAD---the redirect is correctly formatted as there is currently an existing web app that logs in effectively through myapps; I am attempting to make a CLI. For the type error, I am only passing in one redirect uri. However, it is possible that this redirect is implicitly called---interestingly, the redirect in the url that shows up when acquire_token_interactive is called does not match the one in AAD... perhaps this could signal an issue?

Best,

Jake

Share via

How to fix 'AADSTS900971: No reply address provided.' in MSAL Python

1 answer

Your answer