Redirect URL of OAuth2.0 of Azure application can not set with a single slash.

Question

In RFC8252 Section 7.1 https://datatracker.ietf.org/doc/html/rfc8252#section-7.1 said that custom redirect url should be like "com.example.app:/oauth2redirect/example-provider".
Why Mobile and desktop appication of Azure not support such format, Azure said "Must start with HTTPS, HTTP, or 'customScheme://'", it is double slash!!!
When using double slash in redirect URL, open microsoft login page by OAuth 2.0 auth API from Android native App, after got authrization, go back to App, it is always jump a dialog said "this site would like to open an app"..This UX experience is bad.

So I suggest Azure follow the RFC8252 Section 7.1 to support single slash ("/") appears after the scheme component.

for example: com.example.app:/oauth2redirect/example-provider

Answer 1

Hi @Xie Nash

I just tested in the Azure portal and it seems to be by design. It does not support redirect URLs with a single slash (:/). I noticed that the documentation you shared is a few years old, and I'm not sure if the Azure portal has made changes to the restrictions on redirecting URLs.

So I suggest you to open a support ticket for help from the Azure product team.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.